last executing test programs: 5.019998277s ago: executing program 0 (id=6144): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r1, &(0x7f0000000180), 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r2, &(0x7f0000000200), 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r3, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 4.393051162s ago: executing program 1 (id=6146): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=@framed={{}, [@snprintf={{}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb6}}]}, 0x0}, 0x94) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB='V?\x00\x00-\x00Y'], 0xfe33) 4.284187503s ago: executing program 1 (id=6147): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xc}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x20040084) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r6, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0xfff1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 3.912065026s ago: executing program 1 (id=6148): r0 = socket$xdp(0x2c, 0x3, 0x0) unshare(0x2a020400) setsockopt(r0, 0x11b, 0x9, 0x0, 0x0) 3.751800558s ago: executing program 1 (id=6149): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r1 = syz_open_dev$sndpcmc(&(0x7f00000001a0), 0x0, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r1, 0xc2604111, &(0x7f0000000c00)={0xe9, [[0x8, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x81, 0x3], [0xffffffff, 0x55, 0xffffffff, 0x6, 0xffffffff, 0xffffdfff, 0xffffffff, 0xffffffff]], '\x00', [{0xd, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x4, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x4, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r1, 0xc0884113, &(0x7f0000000300)={0x0, 0x8, 0x0, 0x8, 0x0, 0x10001, 0x5, 0x5, 0x1, 0x1, 0x2, 0x2}) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r1, 0x40184150, &(0x7f0000000140)={0x0, &(0x7f0000000080)="a1", 0x1}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x14a8}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) 3.602721809s ago: executing program 0 (id=6150): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280), 0x288000, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r1, 0x80083313, &(0x7f00000002c0)) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000200)='foo#dnserror=1\x00', 0xf, 0xfffffffffffffffe) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/keys\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000002980)={0x2020}, 0x15be) socket(0x400000000010, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_setup(0x17ae, &(0x7f0000000780)={0x0, 0xb1d5, 0x8000, 0x3, 0x10d}, &(0x7f0000000800), &(0x7f0000000840)=0x0, &(0x7f0000000880)) munmap$IORING_OFF_CQ_RING(r4, 0xffffffffffffff00) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r6, &(0x7f0000000300)={0x0, 0xffffffffffffff20, &(0x7f00000002c0)={&(0x7f0000001740)={0x2c, r5, 0x701, 0x0, 0x0, {{}, {@void, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x2c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a010200000000000000000100fffd0900010073797a30000000000900030073797a300200000074000000060a010400000000000000000100000008000b400000000038000480340001800a0001006d617463680000002400028008000300e4edf2b708000240000000000e000100636f6e6e6c6162656c0000000900010073797a300000000014000580080001"], 0xe8}}, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r10, {0xf000, 0xffff}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x1, 0xa}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 3.241922552s ago: executing program 1 (id=6151): socket(0x10, 0x803, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x4c, 0x2, 0x6, 0x605, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x4c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x800}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x1}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}}, 0x800) 3.141892453s ago: executing program 0 (id=6152): r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000000)=@ethtool_rxnfc={0x0, 0x8, 0x6, {0x3, @sctp_ip4_spec={@rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x41}, 0x4e24, 0x4e22, 0x6}, {0x0, @remote, 0xe, 0x9e7f, [0x7, 0x6]}, @ah_ip4_spec={@multicast1, @private=0xa010101, 0xfffffffc, 0x45}, {0x0, @empty, 0xffe, 0x5, [0x209, 0xf]}, 0xff, 0x3}}}) 2.993196544s ago: executing program 0 (id=6153): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0xa2602, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x5}, 0x2) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x18a42000) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000100), 0x2) socket$nl_route(0x10, 0x3, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000001180)=""/4107, 0x100b}], 0x1, 0x0, 0x0) 2.992893864s ago: executing program 1 (id=6154): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$cont(0x7, r0, 0x6a, 0x200008) 394.501657ms ago: executing program 0 (id=6156): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f00000000c0)=0x6, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x8000) bind$packet(r2, &(0x7f0000000040)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @local}, 0x14) sendto$inet6(r2, &(0x7f0000000800)="410309fc1116480401020200c52cf7c25975e005b02f000006892f000300897c6b118777faffffff3066090cb600c5471d130a66321a54e7df305fbe258161b6fd8f2428652265d94c6fdbaefc57376a57c2feffff188be9427c323ef024a37016d2a7f9ab6e7941a6fc4f95aa73c1dfff4941f6503b5bd8c91db22cd33795481c94085fa12cdc679ac2a5d7b5d99b93fb07acb0da680e78b74c74aae8d7690d5986a9af81622a0ac210bc7b5ca5fed11cb54d046642670041e846bb184ff5d39fe8516d2d2a8d84e6e7dfcb2b8a8023444db513a3d7a124b59f0a5cd36489dbbb75cce3145d0ea3c3aa21af7cbcbc7a7575db782e757ca543109f5ddcec4930aa91f4119ea3d1f56140cb86cfe0724b23904ef5d05c725ee23918a502b1afe09fb0757d", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000ac0)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0x0, 0x3}, {}, {0xfff3, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x0) 0s ago: executing program 0 (id=6157): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xfff1, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000240)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x7, 0xfff2}, {0xa, 0xffff}, {0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0xd7, 0xd782, 0x8, 0x704, 0x4}, 0x10}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4008040}, 0x4000000) write$tun(r1, &(0x7f0000000300)={@void, @void, @arp=@ether_ipv4={0x1, 0x86dd, 0x6, 0x4, 0x8, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x27}, @broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}, @private=0xa010101}}, 0x1c) kernel console output (not intermixed with test programs): ngset_refault_anon 3490 [ 2049.783622][ T6512] total_workingset_refault_file 2161 [ 2049.783688][ T6512] total_swap 127913984 [ 2049.783751][ T6512] total_swapcached 946790400 [ 2049.783851][ T6512] total_pgpgin 5819881 [ 2049.783935][ T6512] total_pgpgout 5744018 [ 2049.784032][ T6512] total_pgfault 3022073 [ 2049.784099][ T6512] total_pgmajfault 577 [ 2049.784162][ T6512] total_inactive_anon 193056768 [ 2049.784225][ T6512] total_active_anon 319488 [ 2049.784287][ T6512] total_inactive_file 0 [ 2049.784367][ T6512] total_active_file 0 [ 2049.785208][ T6512] total_unevictable 119435264 [ 2049.785306][ T6512] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.846,pid=6499,uid=0 [ 2049.786401][ T6512] Memory cgroup out of memory: Killed process 6499 (syz.0.846) total-vm:124980kB, anon-rss:111652kB, file-rss:12892kB, shmem-rss:0kB, UID:0 pgtables:296kB oom_score_adj:1000 [ 2053.182456][ T31] oom_reaper: reaped process 6499 (syz.0.846), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2095.756896][ T6566] input: syz0 as /devices/virtual/input/input56 [ 2111.905691][ T6585] fuse: fd is not a fuse device [ 2112.079215][ T6587] fuse: fd is not a fuse device [ 2129.718115][ T6623] input: syz0 as /devices/virtual/input/input57 [ 2159.348056][ T6649] syz.0.884 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2159.348415][ T6649] CPU: 1 UID: 0 PID: 6649 Comm: syz.0.884 Tainted: G W syzkaller #0 PREEMPT [ 2159.348529][ T6649] Tainted: [W]=WARN [ 2159.348576][ T6649] Hardware name: linux,dummy-virt (DT) [ 2159.348618][ T6649] Call trace: [ 2159.348654][ T6649] show_stack+0x18/0x24 (C) [ 2159.348763][ T6649] dump_stack_lvl+0x60/0x80 [ 2159.348833][ T6649] dump_stack+0x18/0x24 [ 2159.348898][ T6649] dump_header+0x40/0x170 [ 2159.348985][ T6649] oom_kill_process+0x220/0x2a0 [ 2159.349066][ T6649] out_of_memory+0xec/0x58c [ 2159.349144][ T6649] mem_cgroup_out_of_memory+0x108/0x118 [ 2159.349223][ T6649] try_charge_memcg+0x3b4/0x590 [ 2159.349302][ T6649] charge_memcg+0xe0/0x23c [ 2159.349389][ T6649] __mem_cgroup_charge+0x38/0x128 [ 2159.349468][ T6649] shmem_alloc_and_add_folio+0x140/0x628 [ 2159.349574][ T6649] shmem_get_folio_gfp+0x114/0x758 [ 2159.349692][ T6649] shmem_write_begin+0x6c/0x158 [ 2159.349780][ T6649] generic_perform_write+0xb4/0x24c [ 2159.349855][ T6649] shmem_file_write_iter+0xa0/0xa8 [ 2159.349929][ T6649] __kernel_write_iter+0xfc/0x27c [ 2159.350008][ T6649] dump_user_range+0xe4/0x304 [ 2159.350087][ T6649] elf_core_dump+0xc68/0xf44 [ 2159.350166][ T6649] vfs_coredump+0xf04/0x1de0 [ 2159.350236][ T6649] get_signal+0x604/0x860 [ 2159.350307][ T6649] arch_do_signal_or_restart+0x11c/0x3dc [ 2159.350380][ T6649] exit_to_user_mode_loop+0x114/0x19c [ 2159.350456][ T6649] el0_da+0xe8/0xf0 [ 2159.350537][ T6649] el0t_64_sync_handler+0xd0/0xe4 [ 2159.350663][ T6649] el0t_64_sync+0x1a4/0x1a8 [ 2159.350895][ T6649] memory: usage 307200kB, limit 307200kB, failcnt 171390 [ 2159.351013][ T6649] memory+swap: usage 432196kB, limit 9007199254740988kB, failcnt 0 [ 2159.351111][ T6649] kmem: usage 1648kB, limit 9007199254740988kB, failcnt 0 [ 2159.351245][ T6649] Memory cgroup stats for /syz0: [ 2159.351857][ T6649] cache 189317120 [ 2159.351947][ T6649] rss 123445248 [ 2159.352024][ T6649] rss_huge 0 [ 2159.352097][ T6649] shmem 182988800 [ 2159.352163][ T6649] mapped_file 6328320 [ 2159.352239][ T6649] dirty 12288 [ 2159.352342][ T6649] writeback 0 [ 2159.352424][ T6649] workingset_refault_anon 4516 [ 2159.352502][ T6649] workingset_refault_file 2161 [ 2159.352607][ T6649] swap 127995904 [ 2159.352684][ T6649] swapcached 1074896896 [ 2159.352814][ T6649] pgpgin 6276502 [ 2159.352900][ T6649] pgpgout 6200655 [ 2159.352986][ T6649] pgfault 3255884 [ 2159.353060][ T6649] pgmajfault 723 [ 2159.353137][ T6649] inactive_anon 193261568 [ 2159.353212][ T6649] active_anon 65536 [ 2159.353286][ T6649] inactive_file 0 [ 2159.353360][ T6649] active_file 0 [ 2159.353435][ T6649] unevictable 119435264 [ 2159.353511][ T6649] hierarchical_memory_limit 314572800 [ 2159.353599][ T6649] hierarchical_memsw_limit 9223372036854771712 [ 2159.353677][ T6649] total_cache 189317120 [ 2159.353753][ T6649] total_rss 123445248 [ 2159.353897][ T6649] total_rss_huge 0 [ 2159.353978][ T6649] total_shmem 182988800 [ 2159.354073][ T6649] total_mapped_file 6328320 [ 2159.354159][ T6649] total_dirty 12288 [ 2159.354234][ T6649] total_writeback 0 [ 2159.354308][ T6649] total_workingset_refault_anon 4516 [ 2159.354385][ T6649] total_workingset_refault_file 2161 [ 2159.354701][ T6649] total_swap 127995904 [ 2159.355458][ T6649] total_swapcached 1074896896 [ 2159.355546][ T6649] total_pgpgin 6276502 [ 2159.355738][ T6649] total_pgpgout 6200655 [ 2159.355828][ T6649] total_pgfault 3255884 [ 2159.355906][ T6649] total_pgmajfault 723 [ 2159.356032][ T6649] total_inactive_anon 193261568 [ 2159.356115][ T6649] total_active_anon 65536 [ 2159.356201][ T6649] total_inactive_file 0 [ 2159.356277][ T6649] total_active_file 0 [ 2159.356352][ T6649] total_unevictable 119435264 [ 2159.356432][ T6649] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.884,pid=6642,uid=0 [ 2159.357242][ T6649] Memory cgroup out of memory: Killed process 6643 (syz.0.884) total-vm:124980kB, anon-rss:111652kB, file-rss:12892kB, shmem-rss:0kB, UID:0 pgtables:296kB oom_score_adj:1000 [ 2181.402198][ T6694] fuse: fd is not a fuse device [ 2196.372072][ T6713] fuse: fd is not a fuse device [ 2209.138865][ T6723] syz.1.904 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 2209.140960][ T6723] CPU: 1 UID: 0 PID: 6723 Comm: syz.1.904 Tainted: G W syzkaller #0 PREEMPT [ 2209.141129][ T6723] Tainted: [W]=WARN [ 2209.141167][ T6723] Hardware name: linux,dummy-virt (DT) [ 2209.141213][ T6723] Call trace: [ 2209.141253][ T6723] show_stack+0x18/0x24 (C) [ 2209.141377][ T6723] dump_stack_lvl+0x60/0x80 [ 2209.141452][ T6723] dump_stack+0x18/0x24 [ 2209.141517][ T6723] dump_header+0x40/0x170 [ 2209.141596][ T6723] oom_kill_process+0x220/0x2a0 [ 2209.141680][ T6723] out_of_memory+0xec/0x58c [ 2209.141755][ T6723] mem_cgroup_out_of_memory+0x108/0x118 [ 2209.141836][ T6723] try_charge_memcg+0x3b4/0x590 [ 2209.141912][ T6723] charge_memcg+0xe0/0x23c [ 2209.141989][ T6723] __mem_cgroup_charge+0x38/0x128 [ 2209.142078][ T6723] shmem_alloc_and_add_folio+0x140/0x628 [ 2209.142157][ T6723] shmem_get_folio_gfp+0x114/0x758 [ 2209.142230][ T6723] shmem_write_begin+0x6c/0x158 [ 2209.142309][ T6723] generic_perform_write+0xb4/0x24c [ 2209.142386][ T6723] shmem_file_write_iter+0xa0/0xa8 [ 2209.142464][ T6723] __kernel_write_iter+0xfc/0x27c [ 2209.142549][ T6723] dump_user_range+0xe4/0x304 [ 2209.142632][ T6723] elf_core_dump+0xc68/0xf44 [ 2209.142715][ T6723] vfs_coredump+0xf04/0x1de0 [ 2209.142788][ T6723] get_signal+0x604/0x860 [ 2209.142865][ T6723] arch_do_signal_or_restart+0x11c/0x3dc [ 2209.142940][ T6723] exit_to_user_mode_loop+0x114/0x19c [ 2209.143029][ T6723] el0_da+0xe8/0xf0 [ 2209.143118][ T6723] el0t_64_sync_handler+0xd0/0xe4 [ 2209.143199][ T6723] el0t_64_sync+0x1a4/0x1a8 [ 2209.160845][ T6723] memory: usage 307200kB, limit 307200kB, failcnt 96499 [ 2209.162438][ T6723] memory+swap: usage 432192kB, limit 9007199254740988kB, failcnt 0 [ 2209.164010][ T6723] kmem: usage 1832kB, limit 9007199254740988kB, failcnt 0 [ 2209.165980][ T6723] Memory cgroup stats for /syz1: [ 2209.168111][ T6723] cache 188882944 [ 2209.169759][ T6723] rss 123809792 [ 2209.170864][ T6723] rss_huge 0 [ 2209.171933][ T6723] shmem 184688640 [ 2209.172992][ T6723] mapped_file 4194304 [ 2209.174155][ T6723] dirty 8192 [ 2209.176247][ T6723] writeback 0 [ 2209.177564][ T6723] workingset_refault_anon 3114 [ 2209.178657][ T6723] workingset_refault_file 663 [ 2209.179935][ T6723] swap 127991808 [ 2209.180945][ T6723] swapcached 533598208 [ 2209.182023][ T6723] pgpgin 7643140 [ 2209.182956][ T6723] pgpgout 7566798 [ 2209.183883][ T6723] pgfault 3989507 [ 2209.184723][ T6723] pgmajfault 482 [ 2209.185243][ T6723] inactive_anon 195198976 [ 2209.185840][ T6723] active_anon 155648 [ 2209.186720][ T6723] inactive_file 0 [ 2209.187521][ T6723] active_file 0 [ 2209.188381][ T6723] unevictable 117301248 [ 2209.189309][ T6723] hierarchical_memory_limit 314572800 [ 2209.190445][ T6723] hierarchical_memsw_limit 9223372036854771712 [ 2209.191698][ T6723] total_cache 188882944 [ 2209.192899][ T6723] total_rss 123809792 [ 2209.193104][ T6723] total_rss_huge 0 [ 2209.193196][ T6723] total_shmem 184688640 [ 2209.193276][ T6723] total_mapped_file 4194304 [ 2209.193346][ T6723] total_dirty 8192 [ 2209.193409][ T6723] total_writeback 0 [ 2209.193486][ T6723] total_workingset_refault_anon 3114 [ 2209.193566][ T6723] total_workingset_refault_file 663 [ 2209.193641][ T6723] total_swap 127991808 [ 2209.193715][ T6723] total_swapcached 533598208 [ 2209.193792][ T6723] total_pgpgin 7643140 [ 2209.193867][ T6723] total_pgpgout 7566798 [ 2209.193942][ T6723] total_pgfault 3989507 [ 2209.194034][ T6723] total_pgmajfault 482 [ 2209.194110][ T6723] total_inactive_anon 195198976 [ 2209.194177][ T6723] total_active_anon 155648 [ 2209.194242][ T6723] total_inactive_file 0 [ 2209.194306][ T6723] total_active_file 0 [ 2209.194370][ T6723] total_unevictable 117301248 [ 2209.194865][ T6723] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.904,pid=6714,uid=0 [ 2209.196007][ T6723] Memory cgroup out of memory: Killed process 6714 (syz.1.904) total-vm:122932kB, anon-rss:111652kB, file-rss:10844kB, shmem-rss:0kB, UID:0 pgtables:292kB oom_score_adj:0 [ 2212.408151][ T31] oom_reaper: reaped process 6714 (syz.1.904), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2238.056268][ T6777] input: syz0 as /devices/virtual/input/input58 [ 2246.076360][ T6800] input: syz0 as /devices/virtual/input/input59 [ 2260.233529][ T6838] capability: warning: `syz.0.935' uses deprecated v2 capabilities in a way that may be insecure [ 2261.699710][ T6845] fuse: fd is not a fuse device [ 2281.068320][ T6886] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 2332.168364][ T6982] fuse: fd is not a fuse device [ 2346.347009][ T7017] fuse: fd is not a fuse device [ 2346.351188][ T7017] fuse: fd is not a fuse device [ 2351.327029][ T7038] fuse: fd is not a fuse device [ 2351.417878][ T7040] fuse: fd is not a fuse device [ 2352.186081][ T7050] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1004'. [ 2374.704230][ T7094] fuse: fd is not a fuse device [ 2381.611113][ T7122] input: syz0 as /devices/virtual/input/input60 [ 2390.168363][ T7132] fuse: fd is not a fuse device [ 2390.775833][ T7138] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1030'. [ 2402.158944][ T3522] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 2402.242935][ T3522] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 2444.479029][ T7255] fuse: fd is not a fuse device [ 2444.836737][ T7261] input: syz0 as /devices/virtual/input/input61 [ 2445.017656][ T7263] ======================================================= [ 2445.017656][ T7263] WARNING: The mand mount option has been deprecated and [ 2445.017656][ T7263] and is ignored by this kernel. Remove the mand [ 2445.017656][ T7263] option from the mount to silence this warning. [ 2445.017656][ T7263] ======================================================= [ 2447.077752][ T7266] fuse: fd is not a fuse device [ 2447.280705][ T7268] fuse: fd is not a fuse device [ 2452.295137][ T7282] fuse: fd is not a fuse device [ 2478.057015][ T7315] fuse: fd is not a fuse device [ 2490.147349][ T7342] lo: entered promiscuous mode [ 2490.160325][ T7342] lo: left promiscuous mode [ 2500.744151][ T7366] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1098'. [ 2513.362827][ T7400] fuse: fd is not a fuse device [ 2561.215400][ T4418] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 2561.381941][ T4418] usb 1-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 2561.510144][ T4418] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2561.510480][ T4418] usb 1-1: Product: syz [ 2561.510707][ T4418] usb 1-1: Manufacturer: syz [ 2561.510817][ T4418] usb 1-1: SerialNumber: syz [ 2561.636489][ T4418] pl2303 1-1:1.0: required interrupt-in endpoint missing [ 2562.533685][ T4418] usb 1-1: USB disconnect, device number 5 [ 2563.016016][ T7518] input: syz0 as /devices/virtual/input/input62 [ 2608.795448][ T7589] fuse: fd is not a fuse device [ 2620.261180][ T7615] input: syz1 as /devices/virtual/input/input63 [ 2631.952383][ T7659] fuse: fd is not a fuse device [ 2641.374115][ T7693] input: syz0 as /devices/virtual/input/input64 [ 2669.869130][ T7744] fuse: fd is not a fuse device [ 2670.028033][ T7746] fuse: fd is not a fuse device [ 2681.562116][ T7787] fuse: fd is not a fuse device [ 2696.083328][ T7821] fuse: fd is not a fuse device [ 2697.935739][ T7557] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 2698.126905][ T7557] usb 1-1: unable to get BOS descriptor or descriptor too short [ 2698.129794][ T7557] usb 1-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 2698.145156][ T7557] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 2698.159806][ T7557] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2698.160006][ T7557] usb 1-1: Product: syz [ 2698.160184][ T7557] usb 1-1: Manufacturer: syz [ 2698.160248][ T7557] usb 1-1: SerialNumber: syz [ 2698.426898][ T7557] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 2698.614247][ T7557] usb 1-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 2698.616419][ T7557] usb 1-1: found format II with max.bitrate = 4, frame size=7372 [ 2699.033958][ T7557] usb 1-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 2699.035361][ T7557] usb 1-1: found format II with max.bitrate = 4, frame size=7372 [ 2699.245934][ T7557] usb 1-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 2699.430418][ T7557] usb 1-1: USB disconnect, device number 6 [ 2699.840300][ T7831] udevd[7831]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2731.533109][ T7897] FAULT_INJECTION: forcing a failure. [ 2731.533109][ T7897] name failslab, interval 1, probability 0, space 0, times 0 [ 2731.536172][ T7897] CPU: 1 UID: 0 PID: 7897 Comm: syz.0.1262 Tainted: G W syzkaller #0 PREEMPT [ 2731.536334][ T7897] Tainted: [W]=WARN [ 2731.536375][ T7897] Hardware name: linux,dummy-virt (DT) [ 2731.536421][ T7897] Call trace: [ 2731.536461][ T7897] show_stack+0x18/0x24 (C) [ 2731.536590][ T7897] dump_stack_lvl+0x60/0x80 [ 2731.536669][ T7897] dump_stack+0x18/0x24 [ 2731.536745][ T7897] should_fail_ex+0x1e0/0x238 [ 2731.536825][ T7897] should_failslab+0x54/0x80 [ 2731.536902][ T7897] __kmalloc_cache_noprof+0x58/0x470 [ 2731.536986][ T7897] alloc_mnt_ns+0x58/0x1ac [ 2731.537061][ T7897] __arm64_sys_fsmount+0x240/0x420 [ 2731.537137][ T7897] invoke_syscall+0x54/0x10c [ 2731.537213][ T7897] el0_svc_common.constprop.0+0x40/0xe0 [ 2731.537290][ T7897] do_el0_svc+0x1c/0x34 [ 2731.537357][ T7897] el0_svc+0x38/0x1fc [ 2731.537433][ T7897] el0t_64_sync_handler+0xa0/0xe4 [ 2731.537505][ T7897] el0t_64_sync+0x1a4/0x1a8 [ 2733.451895][ T7904] fuse: fd is not a fuse device [ 2743.211448][ T7930] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1271'. [ 2744.827652][ T7938] fuse: fd is not a fuse device [ 2745.771456][ T7944] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1276'. [ 2746.522139][ T7949] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1278'. [ 2749.655888][ T7966] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1284'. [ 2760.041311][ T7999] fuse: fd is not a fuse device [ 2760.177481][ T8001] fuse: fd is not a fuse device [ 2761.138808][ T8005] fuse: fd is not a fuse device [ 2761.196816][ T8007] syz.1.1298 uses obsolete (PF_INET,SOCK_PACKET) [ 2770.783191][ T8030] fuse: fd is not a fuse device [ 2773.808878][ T8051] fuse: fd is not a fuse device [ 2774.336654][ T8059] fuse: fd is not a fuse device [ 2774.439310][ T8061] fuse: fd is not a fuse device [ 2790.800024][ T8081] fuse: fd is not a fuse device [ 2791.020510][ T8083] fuse: fd is not a fuse device [ 2791.471060][ T8093] fuse: fd is not a fuse device [ 2793.812327][ T8108] fuse: fd is not a fuse device [ 2793.913933][ T8110] fuse: fd is not a fuse device [ 2799.161839][ T8126] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1338'. [ 2799.544176][ T8130] fuse: fd is not a fuse device [ 2814.772041][ T8142] syz.1.1344 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 2814.772446][ T8142] CPU: 0 UID: 0 PID: 8142 Comm: syz.1.1344 Tainted: G W syzkaller #0 PREEMPT [ 2814.772554][ T8142] Tainted: [W]=WARN [ 2814.772594][ T8142] Hardware name: linux,dummy-virt (DT) [ 2814.772632][ T8142] Call trace: [ 2814.772662][ T8142] show_stack+0x18/0x24 (C) [ 2814.772761][ T8142] dump_stack_lvl+0x60/0x80 [ 2814.772827][ T8142] dump_stack+0x18/0x24 [ 2814.772889][ T8142] dump_header+0x40/0x170 [ 2814.772955][ T8142] oom_kill_process+0x220/0x2a0 [ 2814.773088][ T8142] out_of_memory+0xec/0x58c [ 2814.773161][ T8142] mem_cgroup_out_of_memory+0x108/0x118 [ 2814.773251][ T8142] try_charge_memcg+0x3b4/0x590 [ 2814.773428][ T8142] charge_memcg+0xe0/0x23c [ 2814.773537][ T8142] __mem_cgroup_charge+0x38/0x128 [ 2814.773659][ T8142] shmem_alloc_and_add_folio+0x140/0x628 [ 2814.773777][ T8142] shmem_get_folio_gfp+0x114/0x758 [ 2814.773898][ T8142] shmem_write_begin+0x6c/0x158 [ 2814.774003][ T8142] generic_perform_write+0xb4/0x24c [ 2814.774128][ T8142] shmem_file_write_iter+0xa0/0xa8 [ 2814.774237][ T8142] __kernel_write_iter+0xfc/0x27c [ 2814.774346][ T8142] dump_user_range+0xe4/0x304 [ 2814.774507][ T8142] elf_core_dump+0xc68/0xf44 [ 2814.774625][ T8142] vfs_coredump+0xf04/0x1de0 [ 2814.774717][ T8142] get_signal+0x604/0x860 [ 2814.774817][ T8142] arch_do_signal_or_restart+0x11c/0x3dc [ 2814.774923][ T8142] exit_to_user_mode_loop+0x114/0x19c [ 2814.775046][ T8142] el0_da+0xe8/0xf0 [ 2814.775135][ T8142] el0t_64_sync_handler+0xd0/0xe4 [ 2814.775206][ T8142] el0t_64_sync+0x1a4/0x1a8 [ 2814.775822][ T8142] memory: usage 307200kB, limit 307200kB, failcnt 146303 [ 2814.775871][ T8142] memory+swap: usage 432144kB, limit 9007199254740988kB, failcnt 0 [ 2814.775917][ T8142] kmem: usage 1972kB, limit 9007199254740988kB, failcnt 0 [ 2814.775953][ T8142] Memory cgroup stats for /syz1: [ 2814.776379][ T8142] cache 188637184 [ 2814.776507][ T8142] rss 123863040 [ 2814.776550][ T8142] rss_huge 0 [ 2814.776587][ T8142] shmem 184442880 [ 2814.776627][ T8142] mapped_file 4194304 [ 2814.776669][ T8142] dirty 8192 [ 2814.776705][ T8142] writeback 0 [ 2814.776743][ T8142] workingset_refault_anon 3297 [ 2814.776783][ T8142] workingset_refault_file 3390 [ 2814.776814][ T8142] swap 127942656 [ 2814.776849][ T8142] swapcached 785690624 [ 2814.776904][ T8142] pgpgin 10073312 [ 2814.776941][ T8142] pgpgout 9997516 [ 2814.776978][ T8142] pgfault 5204696 [ 2814.777015][ T8142] pgmajfault 530 [ 2814.777052][ T8142] inactive_anon 205824000 [ 2814.777160][ T8142] active_anon 2875392 [ 2814.777191][ T8142] inactive_file 0 [ 2814.777227][ T8142] active_file 0 [ 2814.777261][ T8142] unevictable 103829504 [ 2814.777298][ T8142] hierarchical_memory_limit 314572800 [ 2814.777339][ T8142] hierarchical_memsw_limit 9223372036854771712 [ 2814.777376][ T8142] total_cache 188637184 [ 2814.777410][ T8142] total_rss 123863040 [ 2814.777437][ T8142] total_rss_huge 0 [ 2814.777471][ T8142] total_shmem 184442880 [ 2814.777509][ T8142] total_mapped_file 4194304 [ 2814.777549][ T8142] total_dirty 8192 [ 2814.777581][ T8142] total_writeback 0 [ 2814.777615][ T8142] total_workingset_refault_anon 3297 [ 2814.777653][ T8142] total_workingset_refault_file 3390 [ 2814.777688][ T8142] total_swap 127942656 [ 2814.777723][ T8142] total_swapcached 785690624 [ 2814.777762][ T8142] total_pgpgin 10073312 [ 2814.777830][ T8142] total_pgpgout 9997516 [ 2814.777856][ T8142] total_pgfault 5204696 [ 2814.777882][ T8142] total_pgmajfault 530 [ 2814.777908][ T8142] total_inactive_anon 205824000 [ 2814.777946][ T8142] total_active_anon 2875392 [ 2814.777984][ T8142] total_inactive_file 0 [ 2814.778018][ T8142] total_active_file 0 [ 2814.778055][ T8142] total_unevictable 103829504 [ 2814.778099][ T8142] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.1335,pid=8119,uid=0 [ 2814.778519][ T8142] Memory cgroup out of memory: Killed process 8119 (syz.1.1335) total-vm:124980kB, anon-rss:11448kB, file-rss:8592kB, shmem-rss:0kB, UID:0 pgtables:296kB oom_score_adj:0 [ 2817.096226][ T8145] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1345'. [ 2818.710738][ T8154] fuse: fd is not a fuse device [ 2818.723541][ T8154] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1347'. [ 2820.078776][ T8168] fuse: fd is not a fuse device [ 2820.179163][ T8170] fuse: fd is not a fuse device [ 2820.308983][ T8172] fuse: fd is not a fuse device [ 2822.736513][ T8181] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1358'. [ 2826.126927][ T8190] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1361'. [ 2827.882935][ T8197] input: syz0 as /devices/virtual/input/input65 [ 2845.880095][ T8215] fuse: fd is not a fuse device [ 2846.028081][ T8217] fuse: fd is not a fuse device [ 2852.168689][ T8226] serio: Serial port pts0 [ 2857.131026][ T8244] netlink: 'syz.0.1376': attribute type 3 has an invalid length. [ 2857.819198][ T8250] fuse: fd is not a fuse device [ 2861.682344][ T8269] fuse: fd is not a fuse device [ 2866.132618][ T8276] fuse: fd is not a fuse device [ 2866.282717][ T8278] fuse: fd is not a fuse device [ 2866.426940][ T8280] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1388'. [ 2866.610969][ T8282] fuse: fd is not a fuse device [ 2866.759138][ T8284] fuse: fd is not a fuse device [ 2866.846767][ T8286] fuse: fd is not a fuse device [ 2866.946569][ T8288] fuse: fd is not a fuse device [ 2867.038454][ T8290] fuse: fd is not a fuse device [ 2870.385293][ T8305] fuse: fd is not a fuse device [ 2870.491735][ T8307] fuse: fd is not a fuse device [ 2870.602892][ T8309] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1401'. [ 2879.786201][ T8340] fuse: fd is not a fuse device [ 2879.900341][ T8342] fuse: fd is not a fuse device [ 2881.681147][ T8350] input: syz0 as /devices/virtual/input/input66 [ 2883.741820][ T8356] fuse: fd is not a fuse device [ 2883.968608][ T8358] fuse: fd is not a fuse device [ 2887.301376][ T8371] fuse: fd is not a fuse device [ 2887.429293][ T8373] fuse: fd is not a fuse device [ 2890.741577][ T8387] fuse: fd is not a fuse device [ 2890.822374][ T8389] fuse: fd is not a fuse device [ 2892.109782][ T8396] fuse: fd is not a fuse device [ 2892.351738][ T8401] fuse: fd is not a fuse device [ 2892.457995][ T8404] fuse: fd is not a fuse device [ 2893.255322][ T8412] fuse: fd is not a fuse device [ 2903.651304][ T8445] input: syz0 as /devices/virtual/input/input67 [ 2920.388874][ T8465] fuse: fd is not a fuse device [ 2924.726400][ T8476] fuse: fd is not a fuse device [ 2926.133918][ T8482] fuse: fd is not a fuse device [ 2926.217078][ T8484] fuse: fd is not a fuse device [ 2926.736431][ T8488] fuse: fd is not a fuse device [ 2926.860804][ T8490] fuse: fd is not a fuse device [ 2928.078061][ T8496] fuse: fd is not a fuse device [ 2929.333621][ T8500] fuse: fd is not a fuse device [ 2946.427719][ T8526] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1476'. [ 2956.068512][ T8549] fuse: fd is not a fuse device [ 2956.142047][ T8552] fuse: fd is not a fuse device [ 2956.149999][ T8552] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1484'. [ 2956.233345][ T8554] fuse: fd is not a fuse device [ 2956.241819][ T8554] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1485'. [ 2961.950679][ T8583] fuse: fd is not a fuse device [ 2972.536024][ T8627] input: syz0 as /devices/virtual/input/input68 [ 2982.626167][ T8664] fuse: fd is not a fuse device [ 2982.715623][ T8666] fuse: fd is not a fuse device [ 2986.910011][ T8688] fuse: fd is not a fuse device [ 2991.760350][ T8714] fuse: fd is not a fuse device [ 2992.002088][ T8720] fuse: fd is not a fuse device [ 2992.262941][ T8724] fuse: fd is not a fuse device [ 2992.383159][ T8726] fuse: fd is not a fuse device [ 2995.056995][ T8739] fuse: fd is not a fuse device [ 2995.122320][ T8741] fuse: fd is not a fuse device [ 2999.349089][ T8754] fuse: fd is not a fuse device [ 2999.473080][ T8756] fuse: fd is not a fuse device [ 2999.580983][ T8758] fuse: fd is not a fuse device [ 2999.753999][ T8760] fuse: fd is not a fuse device [ 3001.507528][ T8777] fuse: fd is not a fuse device [ 3001.615270][ T8779] fuse: fd is not a fuse device [ 3002.253267][ T8786] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1563'. [ 3003.654320][ T8793] fuse: fd is not a fuse device [ 3003.767103][ T8796] fuse: fd is not a fuse device [ 3003.839082][ T8799] cgroup: Need name or subsystem set [ 3003.967850][ T8801] fuse: fd is not a fuse device [ 3006.048680][ T8813] input: syz0 as /devices/virtual/input/input69 [ 3013.369241][ T8826] fuse: fd is not a fuse device [ 3015.139964][ T8838] fuse: fd is not a fuse device [ 3015.316393][ T8842] fuse: fd is not a fuse device [ 3015.683155][ T8849] fuse: fd is not a fuse device [ 3015.796525][ T8851] fuse: fd is not a fuse device [ 3015.905355][ T8853] fuse: fd is not a fuse device [ 3018.180142][ T8861] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1592'. [ 3018.567135][ T8864] fuse: fd is not a fuse device [ 3018.664320][ T8866] fuse: fd is not a fuse device [ 3022.117814][ T8882] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1600'. [ 3022.685507][ T8887] fuse: fd is not a fuse device [ 3022.787401][ T8889] fuse: fd is not a fuse device [ 3027.060802][ T8908] fuse: fd is not a fuse device [ 3028.425307][ T8916] fuse: fd is not a fuse device [ 3029.630918][ T8927] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1611'. [ 3030.387802][ T8934] fuse: fd is not a fuse device [ 3040.542458][ T8959] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1625'. [ 3040.684401][ T8961] fuse: fd is not a fuse device [ 3040.793820][ T8967] fuse: fd is not a fuse device [ 3043.468364][ T8976] fuse: fd is not a fuse device [ 3043.571033][ T8980] fuse: fd is not a fuse device [ 3043.942227][ T8987] fuse: fd is not a fuse device [ 3044.254322][ T8996] fuse: fd is not a fuse device [ 3046.939904][ T9004] fuse: fd is not a fuse device [ 3047.100769][ T9007] fuse: fd is not a fuse device [ 3047.482256][ T9015] fuse: fd is not a fuse device [ 3047.492433][ T9015] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1646'. [ 3051.936289][ T9025] kvm [9025]: Failed to find VMA for hva 0x20c79000 [ 3057.549723][ T9055] input: syz1 as /devices/virtual/input/input70 [ 3065.946617][ T9088] fuse: fd is not a fuse device [ 3066.258512][ T9094] fuse: fd is not a fuse device [ 3069.373939][ T9120] serio: Serial port pts0 [ 3070.626495][ T9129] fuse: fd is not a fuse device [ 3072.574136][ T9136] fuse: fd is not a fuse device [ 3072.723253][ T9138] fuse: fd is not a fuse device [ 3072.836338][ T9140] fuse: fd is not a fuse device [ 3072.849858][ T9140] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1685'. [ 3074.543140][ T9147] fuse: fd is not a fuse device [ 3078.410148][ T9161] fuse: fd is not a fuse device [ 3084.074217][ T9194] fuse: fd is not a fuse device [ 3084.088936][ T9194] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1702'. [ 3084.172246][ T9196] fuse: fd is not a fuse device [ 3084.262380][ T9198] fuse: fd is not a fuse device [ 3090.190670][ T9221] fuse: fd is not a fuse device [ 3090.315653][ T9225] fuse: fd is not a fuse device [ 3091.005612][ T9231] input: syz0 as /devices/virtual/input/input71 [ 3105.821116][ T9259] fuse: fd is not a fuse device [ 3112.486973][ T9284] fuse: fd is not a fuse device [ 3112.592822][ T9286] fuse: fd is not a fuse device [ 3116.733216][ T9305] fuse: fd is not a fuse device [ 3137.339505][ T9350] fuse: fd is not a fuse device [ 3137.473250][ T9353] fuse: fd is not a fuse device [ 3138.131498][ T9359] fuse: fd is not a fuse device [ 3138.689407][ T9368] fuse: fd is not a fuse device [ 3138.799094][ T9370] fuse: fd is not a fuse device [ 3138.994261][ T9372] fuse: fd is not a fuse device [ 3140.769536][ T9387] fuse: fd is not a fuse device [ 3144.977375][ T9393] fuse: fd is not a fuse device [ 3154.336021][ T9429] input: syz0 as /devices/virtual/input/input72 [ 3157.567803][ T9436] fuse: fd is not a fuse device [ 3157.727792][ T9438] fuse: fd is not a fuse device [ 3157.749590][ T9438] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1783'. [ 3157.926632][ T9440] fuse: fd is not a fuse device [ 3175.846734][ T9515] : renamed from veth1_to_team (while UP) [ 3175.963075][ T9517] fuse: fd is not a fuse device [ 3185.246510][ T28] audit: type=1326 audit(3185.030:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9535 comm="syz.0.1816" exe="/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa87792a8 code=0x0 [ 3191.372433][ T9559] fuse: fd is not a fuse device [ 3200.565085][ T9605] fuse: fd is not a fuse device [ 3218.588220][ T9639] fuse: fd is not a fuse device [ 3234.357654][ T9675] fuse: fd is not a fuse device [ 3234.610860][ T9681] fuse: fd is not a fuse device [ 3236.470947][ T9689] infiniband syz1: set active [ 3236.473345][ T9689] infiniband syz1: added syz_tun [ 3236.616198][ T9689] RDS/IB: syz1: added [ 3236.617221][ T9689] smc: adding ib device syz1 with port count 1 [ 3236.618448][ T9689] smc: ib device syz1 port 1 has no pnetid [ 3237.722610][ T9690] smc: removing ib device syz1 [ 3239.725784][ T9317] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 3239.727785][ T9317] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 3239.731359][ T9317] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 3239.732028][ T9317] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 3241.539820][ T9709] fuse: fd is not a fuse device [ 3242.636115][ T9720] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 3245.013848][ T9738] input: syz0 as /devices/virtual/input/input73 [ 3262.129587][ T9793] input: syz0 as /devices/virtual/input/input74 [ 3265.225839][ T9798] fuse: fd is not a fuse device [ 3266.678453][ T9807] fuse: fd is not a fuse device [ 3268.224097][ T9813] fuse: fd is not a fuse device [ 3271.206562][ T9829] fuse: fd is not a fuse device [ 3271.462408][ T9820] infiniband syz1: set down [ 3271.464509][ T9820] infiniband syz1: added syz_tun [ 3271.571921][ T9820] RDS/IB: syz1: added [ 3271.586735][ T9820] smc: adding ib device syz1 with port count 1 [ 3271.591461][ T9820] smc: ib device syz1 port 1 has no pnetid [ 3272.235734][ T7557] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 3272.394091][ T7557] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3272.412265][ T7557] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3272.412628][ T7557] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 3272.418053][ T7557] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 3272.481113][ T7557] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3272.481477][ T7557] usb 1-1: Product: syz [ 3272.481691][ T7557] usb 1-1: Manufacturer: syz [ 3272.481748][ T7557] usb 1-1: SerialNumber: syz [ 3272.811783][ T7557] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 3272.812142][ T7557] cdc_ncm 1-1:1.0: bind() failure [ 3272.869184][ T7557] usb 1-1: USB disconnect, device number 7 [ 3280.000085][ T9859] fuse: fd is not a fuse device [ 3291.121830][ T9898] fuse: fd is not a fuse device [ 3295.550656][ T9911] fuse: fd is not a fuse device [ 3301.091438][ T9923] process 'syz.1.1936' launched './file1' with NULL argv: empty string added [ 3301.202070][ T9925] fuse: fd is not a fuse device [ 3302.558916][ T9931] fuse: fd is not a fuse device [ 3332.842539][T10065] pimreg: entered allmulticast mode [ 3359.533199][T10160] fuse: Bad value for 'fd' [ 3382.583848][T10375] fuse: Bad value for 'fd' [ 3416.352544][T11357] capability: warning: `syz.1.2597' uses 32-bit capabilities (legacy support in use) [ 3597.763696][T12205] fuse: Bad value for 'fd' [ 3609.517522][T12257] fuse: Bad value for 'fd' [ 3617.772831][T12282] fuse: Bad value for 'fd' [ 3625.252461][T12312] fuse: Bad value for 'fd' [ 3629.776572][T12342] fuse: Bad value for 'fd' [ 3635.486357][T12359] fuse: fd is not a fuse device [ 3638.345563][T12373] fuse: fd is not a fuse device [ 3648.049727][T12413] fuse: fd is not a fuse device [ 3659.369373][T12459] fuse: Bad value for 'fd' [ 3662.998304][T12485] fuse: fd is not a fuse device [ 3663.926839][T12494] fuse: Bad value for 'fd' [ 3666.969443][T12511] fuse: fd is not a fuse device [ 3667.088269][T12513] fuse: fd is not a fuse device [ 3668.662326][T12523] fuse: Bad value for 'fd' [ 3672.971354][T12548] fuse: fd is not a fuse device [ 3682.541056][T12600] fuse: fd is not a fuse device [ 3707.762675][T12683] fuse: fd is not a fuse device [ 3717.380065][T12725] fuse: Bad value for 'fd' [ 3723.240121][T12742] fuse: Bad value for 'fd' [ 3758.553665][T12840] fuse: fd is not a fuse device [ 3776.346279][T12899] fuse: Bad value for 'fd' [ 3787.296375][T12920] fuse: Bad value for 'fd' [ 3802.413596][T12950] fuse: Bad value for 'fd' [ 3802.526394][T12952] fuse: Bad value for 'fd' [ 3864.103426][T13018] fuse: fd is not a fuse device [ 3893.747114][T13053] fuse: fd is not a fuse device [ 3926.401037][T13085] fuse: fd is not a fuse device [ 3926.699549][T13090] fuse: fd is not a fuse device [ 3940.148181][T13100] fuse: fd is not a fuse device [ 3958.620217][T13136] fuse: fd is not a fuse device [ 3958.729411][T13138] fuse: fd is not a fuse device [ 3970.533681][T13153] fuse: fd is not a fuse device [ 3987.592136][T13172] fuse: fd is not a fuse device [ 4017.009790][T13215] fuse: fd is not a fuse device [ 4026.513590][T13226] fuse: fd is not a fuse device [ 4027.311812][T13230] fuse: fd is not a fuse device [ 4040.962267][T13251] fuse: fd is not a fuse device [ 4041.708269][T13263] fuse: fd is not a fuse device [ 4041.788654][T13265] fuse: fd is not a fuse device [ 4045.122442][T13273] fuse: fd is not a fuse device [ 4051.049131][T13280] fuse: fd is not a fuse device [ 4052.631361][T13286] fuse: fd is not a fuse device [ 4070.603142][T13300] fuse: fd is not a fuse device [ 4070.695082][T13302] fuse: fd is not a fuse device [ 4070.784362][T13304] fuse: fd is not a fuse device [ 4083.130986][T13322] fuse: fd is not a fuse device [ 4085.414309][T13329] fuse: fd is not a fuse device [ 4089.472934][T13341] fuse: fd is not a fuse device [ 4089.557390][T13343] fuse: fd is not a fuse device [ 4104.953885][T13370] fuse: fd is not a fuse device [ 4121.209681][T13386] fuse: fd is not a fuse device [ 4121.302529][T13388] fuse: fd is not a fuse device [ 4139.914159][T13424] fuse: fd is not a fuse device [ 4146.037543][T13436] fuse: fd is not a fuse device [ 4173.920653][T13459] fuse: fd is not a fuse device [ 4173.997946][T13461] fuse: fd is not a fuse device [ 4185.196598][T13479] fuse: fd is not a fuse device [ 4187.750879][T13482] fuse: fd is not a fuse device [ 4198.622299][T13500] fuse: fd is not a fuse device [ 4199.636707][T13507] fuse: fd is not a fuse device [ 4206.807874][T13525] fuse: fd is not a fuse device [ 4218.488720][T13549] fuse: fd is not a fuse device [ 4219.563913][T13555] fuse: fd is not a fuse device [ 4225.214144][T13566] fuse: fd is not a fuse device [ 4225.352004][T13568] fuse: fd is not a fuse device [ 4225.484173][T13570] fuse: fd is not a fuse device [ 4230.939306][T13577] fuse: fd is not a fuse device [ 4231.071363][T13579] fuse: fd is not a fuse device [ 4253.200615][T13605] fuse: fd is not a fuse device [ 4256.803460][T13614] fuse: fd is not a fuse device [ 4260.609414][T13620] fuse: fd is not a fuse device [ 4264.261703][T13626] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3366'. [ 4264.410152][T13632] fuse: fd is not a fuse device [ 4264.481602][T13634] fuse: fd is not a fuse device [ 4264.646555][T13636] fuse: fd is not a fuse device [ 4264.743838][T13641] fuse: fd is not a fuse device [ 4264.849722][T13643] fuse: fd is not a fuse device [ 4265.762674][T13651] fuse: fd is not a fuse device [ 4265.844288][T13653] fuse: fd is not a fuse device [ 4265.943029][T13655] fuse: fd is not a fuse device [ 4266.028192][T13657] fuse: fd is not a fuse device [ 4266.331777][T13661] fuse: fd is not a fuse device [ 4266.450997][T13663] fuse: fd is not a fuse device [ 4266.746648][T13668] fuse: fd is not a fuse device [ 4266.915457][T13673] fuse: fd is not a fuse device [ 4267.026005][T13675] fuse: fd is not a fuse device [ 4267.144259][T13677] fuse: fd is not a fuse device [ 4268.126870][T13680] fuse: fd is not a fuse device [ 4269.236975][T13683] fuse: fd is not a fuse device [ 4269.334383][T13685] fuse: fd is not a fuse device [ 4269.503261][T13689] fuse: fd is not a fuse device [ 4270.215898][T13687] fuse: fd is not a fuse device [ 4276.650721][T13704] fuse: fd is not a fuse device [ 4276.779788][T13708] fuse: fd is not a fuse device [ 4277.063935][T13714] fuse: fd is not a fuse device [ 4277.254011][T13718] fuse: fd is not a fuse device [ 4277.361104][T13720] fuse: fd is not a fuse device [ 4284.363642][T13775] fuse: fd is not a fuse device [ 4286.029449][T13794] fuse: fd is not a fuse device [ 4286.955237][T13826] fuse: fd is not a fuse device [ 4288.564314][T13869] fuse: fd is not a fuse device [ 4288.653456][T13871] fuse: fd is not a fuse device [ 4291.035454][T13963] fuse: fd is not a fuse device [ 4361.506644][T14449] fuse: fd is not a fuse device [ 4361.717349][T14453] fuse: fd is not a fuse device [ 4369.903441][T14491] fuse: fd is not a fuse device [ 4372.910157][T14505] fuse: fd is not a fuse device [ 4373.548035][T14513] fuse: fd is not a fuse device [ 4373.746008][T14518] fuse: fd is not a fuse device [ 4373.904241][T14523] fuse: fd is not a fuse device [ 4401.667417][T14604] fuse: fd is not a fuse device [ 4405.802282][T14626] fuse: fd is not a fuse device [ 4407.450112][T14643] fuse: fd is not a fuse device [ 4408.670067][T14649] fuse: fd is not a fuse device [ 4408.784011][T14651] fuse: fd is not a fuse device [ 4432.764195][T14686] fuse: fd is not a fuse device [ 4432.883283][T14688] fuse: fd is not a fuse device [ 4433.001358][T14690] fuse: fd is not a fuse device [ 4444.928959][T14704] fuse: fd is not a fuse device [ 4456.144023][T14723] fuse: fd is not a fuse device [ 4456.250080][T14725] fuse: fd is not a fuse device [ 4456.544210][T14731] fuse: fd is not a fuse device [ 4456.728723][T14735] fuse: fd is not a fuse device [ 4456.786168][T14737] fuse: fd is not a fuse device [ 4459.423687][T14748] fuse: fd is not a fuse device [ 4459.690330][T14753] fuse: fd is not a fuse device [ 4459.871107][T14759] fuse: fd is not a fuse device [ 4462.907823][T14782] fuse: fd is not a fuse device [ 4463.097799][T14786] fuse: fd is not a fuse device [ 4463.977453][T14791] fuse: fd is not a fuse device [ 4464.383909][T14799] fuse: fd is not a fuse device [ 4466.943052][T14805] fuse: fd is not a fuse device [ 4467.231606][T14811] fuse: fd is not a fuse device [ 4474.402088][T14823] fuse: fd is not a fuse device [ 4502.641617][T14854] syz.0.3873 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 4502.642062][T14854] CPU: 0 UID: 0 PID: 14854 Comm: syz.0.3873 Tainted: G W syzkaller #0 PREEMPT [ 4502.642181][T14854] Tainted: [W]=WARN [ 4502.642217][T14854] Hardware name: linux,dummy-virt (DT) [ 4502.642257][T14854] Call trace: [ 4502.642290][T14854] show_stack+0x18/0x24 (C) [ 4502.642403][T14854] dump_stack_lvl+0x60/0x80 [ 4502.642475][T14854] dump_stack+0x18/0x24 [ 4502.642556][T14854] dump_header+0x40/0x170 [ 4502.642632][T14854] oom_kill_process+0x220/0x2a0 [ 4502.642711][T14854] out_of_memory+0xec/0x58c [ 4502.642783][T14854] mem_cgroup_out_of_memory+0x108/0x118 [ 4502.642861][T14854] try_charge_memcg+0x3b4/0x590 [ 4502.642937][T14854] charge_memcg+0xe0/0x23c [ 4502.643008][T14854] __mem_cgroup_charge+0x38/0x128 [ 4502.643079][T14854] shmem_alloc_and_add_folio+0x140/0x628 [ 4502.643156][T14854] shmem_get_folio_gfp+0x114/0x758 [ 4502.643233][T14854] shmem_write_begin+0x6c/0x158 [ 4502.643300][T14854] generic_perform_write+0xb4/0x24c [ 4502.643367][T14854] shmem_file_write_iter+0xa0/0xa8 [ 4502.643436][T14854] __kernel_write_iter+0xfc/0x27c [ 4502.643512][T14854] dump_user_range+0xe4/0x304 [ 4502.643630][T14854] elf_core_dump+0xc68/0xf44 [ 4502.643711][T14854] vfs_coredump+0xf04/0x1de0 [ 4502.643781][T14854] get_signal+0x604/0x860 [ 4502.643856][T14854] arch_do_signal_or_restart+0x11c/0x3dc [ 4502.643928][T14854] exit_to_user_mode_loop+0x114/0x19c [ 4502.644004][T14854] el0_da+0xe8/0xf0 [ 4502.644090][T14854] el0t_64_sync_handler+0xd0/0xe4 [ 4502.644165][T14854] el0t_64_sync+0x1a4/0x1a8 [ 4502.644466][T14854] memory: usage 307200kB, limit 307200kB, failcnt 245416 [ 4502.645040][T14854] memory+swap: usage 432176kB, limit 9007199254740988kB, failcnt 0 [ 4502.645140][T14854] kmem: usage 1996kB, limit 9007199254740988kB, failcnt 0 [ 4502.645183][T14854] Memory cgroup stats for /syz0: [ 4502.645760][T14854] cache 192131072 [ 4502.645844][T14854] rss 120303616 [ 4502.645895][T14854] rss_huge 0 [ 4502.645928][T14854] shmem 185802752 [ 4502.645958][T14854] mapped_file 6328320 [ 4502.646024][T14854] dirty 0 [ 4502.646073][T14854] writeback 0 [ 4502.646133][T14854] workingset_refault_anon 8032 [ 4502.646172][T14854] workingset_refault_file 3671 [ 4502.646204][T14854] swap 127975424 [ 4502.646248][T14854] swapcached 1502724096 [ 4502.646282][T14854] pgpgin 14210754 [ 4502.646312][T14854] pgpgout 14134983 [ 4502.646369][T14854] pgfault 7461660 [ 4502.646416][T14854] pgmajfault 1258 [ 4502.646448][T14854] inactive_anon 192749568 [ 4502.646477][T14854] active_anon 98304 [ 4502.646504][T14854] inactive_file 0 [ 4502.646538][T14854] active_file 0 [ 4502.646595][T14854] unevictable 119435264 [ 4502.646643][T14854] hierarchical_memory_limit 314572800 [ 4502.646675][T14854] hierarchical_memsw_limit 9223372036854771712 [ 4502.646715][T14854] total_cache 192131072 [ 4502.646762][T14854] total_rss 120303616 [ 4502.646803][T14854] total_rss_huge 0 [ 4502.646845][T14854] total_shmem 185802752 [ 4502.646886][T14854] total_mapped_file 6328320 [ 4502.646915][T14854] total_dirty 0 [ 4502.646942][T14854] total_writeback 0 [ 4502.646971][T14854] total_workingset_refault_anon 8032 [ 4502.646996][T14854] total_workingset_refault_file 3671 [ 4502.647022][T14854] total_swap 127975424 [ 4502.647100][T14854] total_swapcached 1502724096 [ 4502.647132][T14854] total_pgpgin 14210754 [ 4502.647188][T14854] total_pgpgout 14134983 [ 4502.647236][T14854] total_pgfault 7461660 [ 4502.647266][T14854] total_pgmajfault 1258 [ 4502.647328][T14854] total_inactive_anon 192749568 [ 4502.647360][T14854] total_active_anon 98304 [ 4502.647417][T14854] total_inactive_file 0 [ 4502.647461][T14854] total_active_file 0 [ 4502.647498][T14854] total_unevictable 119435264 [ 4502.647579][T14854] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.3873,pid=14847,uid=0 [ 4502.648550][T14854] Memory cgroup out of memory: Killed process 14847 (syz.0.3873) total-vm:124980kB, anon-rss:111652kB, file-rss:12892kB, shmem-rss:0kB, UID:0 pgtables:296kB oom_score_adj:0 [ 4505.306586][ T31] oom_reaper: reaped process 14847 (syz.0.3873), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 4505.695813][T14860] fuse: fd is not a fuse device [ 4505.799593][T14862] fuse: fd is not a fuse device [ 4505.928015][T14864] fuse: fd is not a fuse device [ 4506.076668][T14866] fuse: fd is not a fuse device [ 4506.224011][T14868] fuse: fd is not a fuse device [ 4506.403189][T14870] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3881'. [ 4506.907731][T14874] fuse: fd is not a fuse device [ 4506.921762][T14876] fuse: fd is not a fuse device [ 4507.069088][T14879] fuse: fd is not a fuse device [ 4507.079154][T14880] fuse: fd is not a fuse device [ 4507.249104][T14883] fuse: fd is not a fuse device [ 4507.408424][T14888] fuse: fd is not a fuse device [ 4508.366510][T14894] fuse: fd is not a fuse device [ 4508.458226][T14896] fuse: fd is not a fuse device [ 4508.533493][T14898] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3891'. [ 4508.626114][T14900] fuse: fd is not a fuse device [ 4509.938997][T14906] fuse: fd is not a fuse device [ 4510.059839][T14908] fuse: fd is not a fuse device [ 4510.253977][T14910] fuse: fd is not a fuse device [ 4511.874069][T14916] fuse: fd is not a fuse device [ 4511.959128][T14918] fuse: fd is not a fuse device [ 4512.036559][T14920] fuse: fd is not a fuse device [ 4512.115024][T14922] fuse: fd is not a fuse device [ 4512.441650][T14928] fuse: fd is not a fuse device [ 4512.514353][T14930] fuse: fd is not a fuse device [ 4512.526300][T14930] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3905'. [ 4514.690927][T14938] fuse: fd is not a fuse device [ 4516.843040][T14950] fuse: fd is not a fuse device [ 4517.797731][T14958] fuse: fd is not a fuse device [ 4518.233751][T14963] fuse: fd is not a fuse device [ 4518.251686][T14963] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3918'. [ 4522.076643][T14969] fuse: fd is not a fuse device [ 4530.534157][T15007] fuse: fd is not a fuse device [ 4534.411048][T15079] fuse: fd is not a fuse device [ 4552.107700][T15245] fuse: fd is not a fuse device [ 4553.179229][T15250] fuse: fd is not a fuse device [ 4559.136003][T15275] fuse: fd is not a fuse device [ 4563.983353][T15300] fuse: fd is not a fuse device [ 4564.640114][T15304] fuse: fd is not a fuse device [ 4564.826109][T15308] fuse: fd is not a fuse device [ 4575.183066][T15361] fuse: fd is not a fuse device [ 4575.299370][T15363] fuse: fd is not a fuse device [ 4575.421985][T15365] fuse: fd is not a fuse device [ 4575.491965][T15367] fuse: fd is not a fuse device [ 4589.117720][T15402] fuse: fd is not a fuse device [ 4594.535770][T15406] fuse: fd is not a fuse device [ 4596.733147][T15415] fuse: fd is not a fuse device [ 4596.846051][T15417] fuse: fd is not a fuse device [ 4599.450177][T15423] fuse: fd is not a fuse device [ 4602.748013][T15433] fuse: fd is not a fuse device [ 4605.172957][T15436] fuse: fd is not a fuse device [ 4605.271082][T15438] fuse: fd is not a fuse device [ 4605.362263][T15442] fuse: fd is not a fuse device [ 4605.438730][T15444] fuse: fd is not a fuse device [ 4607.931801][T15452] fuse: fd is not a fuse device [ 4608.009820][T15454] fuse: fd is not a fuse device [ 4608.157358][T15458] fuse: fd is not a fuse device [ 4608.293827][T15461] fuse: fd is not a fuse device [ 4610.869977][T15468] fuse: fd is not a fuse device [ 4610.950213][T15471] fuse: fd is not a fuse device [ 4611.048693][T15474] fuse: fd is not a fuse device [ 4611.147467][T15478] fuse: fd is not a fuse device [ 4611.214241][T15481] fuse: fd is not a fuse device [ 4611.235530][T15482] fuse: fd is not a fuse device [ 4611.328077][T15484] fuse: fd is not a fuse device [ 4611.428928][T15488] fuse: fd is not a fuse device [ 4611.515809][T15490] fuse: fd is not a fuse device [ 4611.602929][T15492] fuse: fd is not a fuse device [ 4611.748643][T15494] fuse: fd is not a fuse device [ 4611.835335][T15496] fuse: fd is not a fuse device [ 4611.929091][T15498] fuse: fd is not a fuse device [ 4612.006647][T15501] fuse: fd is not a fuse device [ 4613.206901][T15509] fuse: fd is not a fuse device [ 4613.327958][T15511] fuse: fd is not a fuse device [ 4613.433391][T15513] fuse: fd is not a fuse device [ 4613.537002][T15516] fuse: fd is not a fuse device [ 4613.635622][T15518] fuse: fd is not a fuse device [ 4615.006413][T15522] fuse: fd is not a fuse device [ 4615.089516][T15524] fuse: fd is not a fuse device [ 4615.279059][T15528] fuse: fd is not a fuse device [ 4615.351021][T15530] fuse: fd is not a fuse device [ 4615.429423][T15532] fuse: fd is not a fuse device [ 4615.507406][T15534] fuse: fd is not a fuse device [ 4615.710505][T15538] fuse: fd is not a fuse device [ 4616.648835][T15547] fuse: fd is not a fuse device [ 4617.081782][T15551] fuse: fd is not a fuse device [ 4617.090919][T15552] fuse: fd is not a fuse device [ 4617.476418][T15558] fuse: fd is not a fuse device [ 4617.548799][T15560] fuse: fd is not a fuse device [ 4620.296173][T15568] fuse: fd is not a fuse device [ 4620.403856][T15570] fuse: fd is not a fuse device [ 4620.532514][T15572] fuse: fd is not a fuse device [ 4620.681821][T15574] fuse: fd is not a fuse device [ 4622.624135][T15581] fuse: fd is not a fuse device [ 4628.270719][T15591] fuse: fd is not a fuse device [ 4628.440745][T15595] fuse: fd is not a fuse device [ 4628.788264][T15599] fuse: fd is not a fuse device [ 4629.427212][T15607] can: request_module (can-proto-0) failed. [ 4631.191607][T15634] fuse: fd is not a fuse device [ 4632.199916][T15650] fuse: fd is not a fuse device [ 4641.996959][T15732] fuse: fd is not a fuse device [ 4642.532794][T15749] fuse: fd is not a fuse device [ 4662.586515][T15991] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4316'. [ 4685.858869][T16295] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4424'. [ 4696.140932][T16377] fuse: fd is not a fuse device [ 4715.520934][T16605] mmap: syz.0.4545 (16605) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 4724.372069][T16652] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4564'. [ 4737.041241][T16803] fuse: fd is not a fuse device [ 4758.240434][T17034] fuse: fd is not a fuse device [ 4773.579796][T17210] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4762'. [ 4781.831679][T17270] fuse: fd is not a fuse device [ 4782.438271][T17280] mmap: syz.1.4786 (17280): VmData 29241344 exceed data ulimit 3. Update limits or use boot option ignore_rlimit_data. [ 4856.298029][T17753] fuse: fd is not a fuse device [ 4886.685268][T17947] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 4886.702781][T17947] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 4887.938987][T17947] hsr_slave_0: entered promiscuous mode [ 4887.944388][T17947] hsr_slave_1: entered promiscuous mode [ 4887.948957][T17947] debugfs: 'hsr0' already exists in 'hsr' [ 4887.950289][T17947] Cannot create hsr debugfs directory [ 4888.573444][T17947] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4888.681352][T17947] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4888.798172][T17947] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4888.921970][T17947] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4889.262839][T17947] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 4889.292759][T17947] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 4889.299724][T17947] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 4889.339375][T17947] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 4889.353642][T17947] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 4889.395692][T17947] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 4889.400810][T17947] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 4889.433868][T17947] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 4890.359301][T17947] 8021q: adding VLAN 0 to HW filter on device bond0 [ 4893.851254][T17947] veth0_vlan: entered promiscuous mode [ 4893.990736][T17947] veth1_vlan: entered promiscuous mode [ 4894.340109][T17947] veth0_macvtap: entered promiscuous mode [ 4894.397513][T17947] veth1_macvtap: entered promiscuous mode [ 4894.926392][T15660] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 4894.932534][T15660] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 4894.934468][T15660] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 4894.966604][ T8605] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 4897.122586][T13681] smc: removing ib device syz1 [ 4902.541905][T15654] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 4902.580121][T15654] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 4902.633009][T15654] bond0 (unregistering): Released all slaves [ 4902.898935][T15654] hsr_slave_0: left promiscuous mode [ 4902.907364][T15654] hsr_slave_1: left promiscuous mode [ 4905.506880][T18104] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 4905.525366][T18104] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 4905.894166][ T3222] 8021q: adding VLAN 0 to HW filter on device eth1 [ 4906.924227][T18104] hsr_slave_0: entered promiscuous mode [ 4906.934190][T18104] hsr_slave_1: entered promiscuous mode [ 4906.946533][T18104] debugfs: 'hsr0' already exists in 'hsr' [ 4906.946949][T18104] Cannot create hsr debugfs directory [ 4907.316995][ T3222] 8021q: adding VLAN 0 to HW filter on device eth2 [ 4908.821243][T18104] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 4908.856310][T18104] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 4908.871237][T18104] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 4908.899499][T18104] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 4908.920097][T18104] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 4908.997984][T18104] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 4909.008493][T18104] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 4909.073899][T18104] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 4910.649614][T18104] 8021q: adding VLAN 0 to HW filter on device bond0 [ 4913.939236][T18104] veth0_vlan: entered promiscuous mode [ 4913.988668][T18104] veth1_vlan: entered promiscuous mode [ 4914.121500][T18104] veth0_macvtap: entered promiscuous mode [ 4914.146769][T18104] veth1_macvtap: entered promiscuous mode [ 4914.259871][ T8605] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 4914.260415][ T8605] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 4914.260848][ T8605] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 4914.261100][ T8605] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 4918.716651][T18303] x_tables: duplicate underflow at hook 1 [ 4923.558727][T18343] x_tables: duplicate underflow at hook 1 [ 4937.489945][T18459] x_tables: duplicate underflow at hook 3 [ 4940.476809][T18469] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5079'. [ 4974.845733][ T28] audit: type=1326 audit(4974.640:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18666 comm="syz.0.5165" exe="/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff85f792a8 code=0x0 [ 4987.945421][T18781] x_tables: duplicate underflow at hook 3 [ 5003.709640][T18801] CUSE: unknown device info "" [ 5003.709984][T18801] CUSE: unknown device info "" [ 5003.713009][T18801] CUSE: unknown device info "ÿ" [ 5003.715301][T18801] CUSE: unknown device info "" [ 5003.716872][T18801] CUSE: unknown device info "ý" [ 5003.717122][T18801] CUSE: unknown device info "" [ 5003.717202][T18801] CUSE: unknown device info "" [ 5003.717322][T18801] CUSE: DEVNAME unspecified [ 5004.040535][T18805] FAULT_INJECTION: forcing a failure. [ 5004.040535][T18805] name fail_futex, interval 1, probability 0, space 0, times 1 [ 5004.040945][T18805] CPU: 1 UID: 0 PID: 18805 Comm: syz.0.5226 Tainted: G W syzkaller #0 PREEMPT [ 5004.041062][T18805] Tainted: [W]=WARN [ 5004.041106][T18805] Hardware name: linux,dummy-virt (DT) [ 5004.041142][T18805] Call trace: [ 5004.041215][T18805] show_stack+0x18/0x24 (C) [ 5004.041336][T18805] dump_stack_lvl+0x60/0x80 [ 5004.041423][T18805] dump_stack+0x18/0x24 [ 5004.041497][T18805] should_fail_ex+0x1e0/0x238 [ 5004.041573][T18805] should_fail+0x14/0x40 [ 5004.041657][T18805] get_futex_key+0xdc/0x620 [ 5004.041758][T18805] futex_wake+0x68/0x240 [ 5004.041834][T18805] do_futex+0x178/0x210 [ 5004.041919][T18805] __arm64_sys_futex+0x100/0x1a0 [ 5004.042015][T18805] invoke_syscall+0x54/0x10c [ 5004.042113][T18805] el0_svc_common.constprop.0+0x40/0xe0 [ 5004.042207][T18805] do_el0_svc+0x1c/0x34 [ 5004.042312][T18805] el0_svc+0x38/0x1fc [ 5004.042399][T18805] el0t_64_sync_handler+0xa0/0xe4 [ 5004.042482][T18805] el0t_64_sync+0x1a4/0x1a8 [ 5006.409724][T18824] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5233'. [ 5010.508036][T18856] FAULT_INJECTION: forcing a failure. [ 5010.508036][T18856] name failslab, interval 1, probability 0, space 0, times 0 [ 5010.508417][T18856] CPU: 1 UID: 0 PID: 18856 Comm: syz.0.5245 Tainted: G W syzkaller #0 PREEMPT [ 5010.508530][T18856] Tainted: [W]=WARN [ 5010.508563][T18856] Hardware name: linux,dummy-virt (DT) [ 5010.508600][T18856] Call trace: [ 5010.508638][T18856] show_stack+0x18/0x24 (C) [ 5010.508831][T18856] dump_stack_lvl+0x60/0x80 [ 5010.509012][T18856] dump_stack+0x18/0x24 [ 5010.509186][T18856] should_fail_ex+0x1e0/0x238 [ 5010.509355][T18856] should_failslab+0x54/0x80 [ 5010.509566][T18856] __kmalloc_cache_noprof+0x58/0x470 [ 5010.509757][T18856] alloc_mnt_ns+0x58/0x1ac [ 5010.509896][T18856] copy_mnt_ns+0x104/0x460 [ 5010.510115][T18856] create_new_namespaces+0x60/0x370 [ 5010.510341][T18856] unshare_nsproxy_namespaces+0x70/0xbc [ 5010.510545][T18856] ksys_unshare+0x1cc/0x3b8 [ 5010.510714][T18856] __arm64_sys_unshare+0x14/0x24 [ 5010.510885][T18856] invoke_syscall+0x54/0x10c [ 5010.511020][T18856] el0_svc_common.constprop.0+0x40/0xe0 [ 5010.511207][T18856] do_el0_svc+0x1c/0x34 [ 5010.511353][T18856] el0_svc+0x38/0x1fc [ 5010.511492][T18856] el0t_64_sync_handler+0xa0/0xe4 [ 5010.511668][T18856] el0t_64_sync+0x1a4/0x1a8 [ 5012.345533][T18877] netlink: 'syz.0.5254': attribute type 13 has an invalid length. [ 5012.405246][T18877] eql: refused to change device tx_queue_len [ 5012.410293][T18877] A link change request failed with some changes committed already. Interface eql may have been left with an inconsistent configuration, please check. [ 5012.923199][T18884] FAULT_INJECTION: forcing a failure. [ 5012.923199][T18884] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 5012.923606][T18884] CPU: 1 UID: 0 PID: 18884 Comm: syz.0.5258 Tainted: G W syzkaller #0 PREEMPT [ 5012.923729][T18884] Tainted: [W]=WARN [ 5012.923768][T18884] Hardware name: linux,dummy-virt (DT) [ 5012.923809][T18884] Call trace: [ 5012.923886][T18884] show_stack+0x18/0x24 (C) [ 5012.924046][T18884] dump_stack_lvl+0x60/0x80 [ 5012.924203][T18884] dump_stack+0x18/0x24 [ 5012.924282][T18884] should_fail_ex+0x1e0/0x238 [ 5012.924397][T18884] should_fail+0x14/0x40 [ 5012.924565][T18884] should_fail_usercopy+0x1c/0x40 [ 5012.924670][T18884] _inline_copy_from_user+0x24/0xb0 [ 5012.924760][T18884] udmabuf_ioctl+0xa8/0x180 [ 5012.924826][T18884] __arm64_sys_ioctl+0xa8/0x100 [ 5012.924914][T18884] invoke_syscall+0x54/0x10c [ 5012.925001][T18884] el0_svc_common.constprop.0+0x40/0xe0 [ 5012.925086][T18884] do_el0_svc+0x1c/0x34 [ 5012.925169][T18884] el0_svc+0x38/0x1fc [ 5012.925322][T18884] el0t_64_sync_handler+0xa0/0xe4 [ 5012.925394][T18884] el0t_64_sync+0x1a4/0x1a8 [ 5013.612931][T18894] FAULT_INJECTION: forcing a failure. [ 5013.612931][T18894] name failslab, interval 1, probability 0, space 0, times 0 [ 5013.617424][T18894] CPU: 0 UID: 0 PID: 18894 Comm: syz.0.5263 Tainted: G W syzkaller #0 PREEMPT [ 5013.617581][T18894] Tainted: [W]=WARN [ 5013.617619][T18894] Hardware name: linux,dummy-virt (DT) [ 5013.617658][T18894] Call trace: [ 5013.617691][T18894] show_stack+0x18/0x24 (C) [ 5013.617797][T18894] dump_stack_lvl+0x60/0x80 [ 5013.617866][T18894] dump_stack+0x18/0x24 [ 5013.617934][T18894] should_fail_ex+0x1e0/0x238 [ 5013.618007][T18894] should_failslab+0x54/0x80 [ 5013.618076][T18894] kmem_cache_alloc_noprof+0x54/0x458 [ 5013.618159][T18894] new_userfaultfd+0x38/0x180 [ 5013.618232][T18894] __arm64_sys_userfaultfd+0x20/0xe0 [ 5013.618308][T18894] invoke_syscall+0x54/0x10c [ 5013.618378][T18894] el0_svc_common.constprop.0+0x40/0xe0 [ 5013.618448][T18894] do_el0_svc+0x1c/0x34 [ 5013.618514][T18894] el0_svc+0x38/0x1fc [ 5013.618593][T18894] el0t_64_sync_handler+0xa0/0xe4 [ 5013.618669][T18894] el0t_64_sync+0x1a4/0x1a8 [ 5013.873225][T18898] FAULT_INJECTION: forcing a failure. [ 5013.873225][T18898] name failslab, interval 1, probability 0, space 0, times 0 [ 5013.873675][T18898] CPU: 1 UID: 0 PID: 18898 Comm: syz.0.5265 Tainted: G W syzkaller #0 PREEMPT [ 5013.873795][T18898] Tainted: [W]=WARN [ 5013.873831][T18898] Hardware name: linux,dummy-virt (DT) [ 5013.873873][T18898] Call trace: [ 5013.873909][T18898] show_stack+0x18/0x24 (C) [ 5013.874067][T18898] dump_stack_lvl+0x60/0x80 [ 5013.874175][T18898] dump_stack+0x18/0x24 [ 5013.874317][T18898] should_fail_ex+0x1e0/0x238 [ 5013.874432][T18898] should_failslab+0x54/0x80 [ 5013.874573][T18898] __kvmalloc_node_noprof+0xc8/0x65c [ 5013.874649][T18898] alloc_netdev_mqs+0x29c/0x4ac [ 5013.874931][T18898] vlan_ioctl_handler+0x260/0x4d8 [ 5013.875068][T18898] sock_ioctl+0x1bc/0x35c [ 5013.875165][T18898] __arm64_sys_ioctl+0xa8/0x100 [ 5013.875280][T18898] invoke_syscall+0x54/0x10c [ 5013.875377][T18898] el0_svc_common.constprop.0+0x40/0xe0 [ 5013.875483][T18898] do_el0_svc+0x1c/0x34 [ 5013.875594][T18898] el0_svc+0x38/0x1fc [ 5013.875681][T18898] el0t_64_sync_handler+0xa0/0xe4 [ 5013.875800][T18898] el0t_64_sync+0x1a4/0x1a8 [ 5014.153773][T18902] FAULT_INJECTION: forcing a failure. [ 5014.153773][T18902] name fail_futex, interval 1, probability 0, space 0, times 0 [ 5014.154189][T18902] CPU: 1 UID: 0 PID: 18902 Comm: syz.0.5267 Tainted: G W syzkaller #0 PREEMPT [ 5014.154315][T18902] Tainted: [W]=WARN [ 5014.154386][T18902] Hardware name: linux,dummy-virt (DT) [ 5014.154467][T18902] Call trace: [ 5014.154507][T18902] show_stack+0x18/0x24 (C) [ 5014.154629][T18902] dump_stack_lvl+0x60/0x80 [ 5014.154706][T18902] dump_stack+0x18/0x24 [ 5014.154781][T18902] should_fail_ex+0x1e0/0x238 [ 5014.154858][T18902] should_fail+0x14/0x40 [ 5014.154953][T18902] get_futex_key+0xdc/0x620 [ 5014.155033][T18902] futex_wake+0x68/0x240 [ 5014.155108][T18902] do_futex+0x178/0x210 [ 5014.155181][T18902] __arm64_sys_futex+0x100/0x1a0 [ 5014.155256][T18902] invoke_syscall+0x54/0x10c [ 5014.155336][T18902] el0_svc_common.constprop.0+0x40/0xe0 [ 5014.155413][T18902] do_el0_svc+0x1c/0x34 [ 5014.155624][T18902] el0_svc+0x38/0x1fc [ 5014.155743][T18902] el0t_64_sync_handler+0xa0/0xe4 [ 5014.155850][T18902] el0t_64_sync+0x1a4/0x1a8 [ 5015.018397][T18907] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check. [ 5017.066969][T18938] tun0: tun_chr_ioctl cmd 35108 [ 5017.068427][T18938] tun0: tun_chr_ioctl cmd 2148553947 [ 5017.908319][T18948] FAULT_INJECTION: forcing a failure. [ 5017.908319][T18948] name failslab, interval 1, probability 0, space 0, times 0 [ 5017.910982][T18948] CPU: 0 UID: 0 PID: 18948 Comm: syz.0.5288 Tainted: G W syzkaller #0 PREEMPT [ 5017.911144][T18948] Tainted: [W]=WARN [ 5017.911182][T18948] Hardware name: linux,dummy-virt (DT) [ 5017.911257][T18948] Call trace: [ 5017.911295][T18948] show_stack+0x18/0x24 (C) [ 5017.911408][T18948] dump_stack_lvl+0x60/0x80 [ 5017.911483][T18948] dump_stack+0x18/0x24 [ 5017.911555][T18948] should_fail_ex+0x1e0/0x238 [ 5017.911667][T18948] should_failslab+0x54/0x80 [ 5017.911741][T18948] __kmalloc_noprof+0xac/0x520 [ 5017.911819][T18948] lsm_blob_alloc+0x40/0x64 [ 5017.911893][T18948] security_sb_alloc+0x30/0x1a4 [ 5017.911960][T18948] sget_fc+0xfc/0x790 [ 5017.912029][T18948] get_tree_nodev+0x2c/0xb8 [ 5017.912094][T18948] mqueue_get_tree+0x44/0x50 [ 5017.912183][T18948] vfs_get_tree+0x28/0x100 [ 5017.912239][T18948] fc_mount_longterm+0x18/0xa0 [ 5017.912311][T18948] mq_init_ns+0xb8/0x210 [ 5017.912371][T18948] copy_ipcs+0x170/0x300 [ 5017.912427][T18948] create_new_namespaces+0xa8/0x370 [ 5017.912535][T18948] unshare_nsproxy_namespaces+0x70/0xbc [ 5017.912606][T18948] ksys_unshare+0x1cc/0x3b8 [ 5017.912681][T18948] __arm64_sys_unshare+0x14/0x24 [ 5017.912747][T18948] invoke_syscall+0x54/0x10c [ 5017.912815][T18948] el0_svc_common.constprop.0+0x40/0xe0 [ 5017.912878][T18948] do_el0_svc+0x1c/0x34 [ 5017.912941][T18948] el0_svc+0x38/0x1fc [ 5017.913015][T18948] el0t_64_sync_handler+0xa0/0xe4 [ 5017.913080][T18948] el0t_64_sync+0x1a4/0x1a8 [ 5018.266245][T18958] FAULT_INJECTION: forcing a failure. [ 5018.266245][T18958] name failslab, interval 1, probability 0, space 0, times 0 [ 5018.267897][T18958] CPU: 1 UID: 0 PID: 18958 Comm: syz.0.5292 Tainted: G W syzkaller #0 PREEMPT [ 5018.268037][T18958] Tainted: [W]=WARN [ 5018.268074][T18958] Hardware name: linux,dummy-virt (DT) [ 5018.268116][T18958] Call trace: [ 5018.268148][T18958] show_stack+0x18/0x24 (C) [ 5018.268245][T18958] dump_stack_lvl+0x60/0x80 [ 5018.268312][T18958] dump_stack+0x18/0x24 [ 5018.268378][T18958] should_fail_ex+0x1e0/0x238 [ 5018.268448][T18958] should_failslab+0x54/0x80 [ 5018.268515][T18958] kmem_cache_alloc_noprof+0x54/0x458 [ 5018.268598][T18958] alloc_empty_file+0x60/0x130 [ 5018.268663][T18958] alloc_file_pseudo+0xb0/0x160 [ 5018.268728][T18958] sock_alloc_file+0x40/0xd8 [ 5018.268797][T18958] do_accept+0xb4/0x1a8 [ 5018.268860][T18958] __sys_accept4+0x84/0x118 [ 5018.268925][T18958] __arm64_sys_accept+0x1c/0x2c [ 5018.268991][T18958] invoke_syscall+0x54/0x10c [ 5018.269056][T18958] el0_svc_common.constprop.0+0x40/0xe0 [ 5018.269122][T18958] do_el0_svc+0x1c/0x34 [ 5018.269185][T18958] el0_svc+0x38/0x1fc [ 5018.269257][T18958] el0t_64_sync_handler+0xa0/0xe4 [ 5018.269328][T18958] el0t_64_sync+0x1a4/0x1a8 [ 5019.825307][T18969] ip6gretap1: entered promiscuous mode [ 5020.276567][T18980] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5303'. [ 5020.287367][T18980] team_slave_0: entered promiscuous mode [ 5020.337362][T18985] FAULT_INJECTION: forcing a failure. [ 5020.337362][T18985] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 5020.337730][T18985] CPU: 1 UID: 0 PID: 18985 Comm: syz.1.5305 Tainted: G W syzkaller #0 PREEMPT [ 5020.337838][T18985] Tainted: [W]=WARN [ 5020.337869][T18985] Hardware name: linux,dummy-virt (DT) [ 5020.337906][T18985] Call trace: [ 5020.337935][T18985] show_stack+0x18/0x24 (C) [ 5020.338101][T18985] dump_stack_lvl+0x60/0x80 [ 5020.338197][T18985] dump_stack+0x18/0x24 [ 5020.338307][T18985] should_fail_ex+0x1e0/0x238 [ 5020.338396][T18985] should_fail+0x14/0x40 [ 5020.338460][T18985] should_fail_usercopy+0x1c/0x40 [ 5020.338564][T18985] _inline_copy_from_user+0x24/0xa8 [ 5020.338670][T18985] __arm64_sys_landlock_create_ruleset+0xf8/0x278 [ 5020.338759][T18985] invoke_syscall+0x54/0x10c [ 5020.338851][T18985] el0_svc_common.constprop.0+0x40/0xe0 [ 5020.338941][T18985] do_el0_svc+0x1c/0x34 [ 5020.339030][T18985] el0_svc+0x38/0x1fc [ 5020.339142][T18985] el0t_64_sync_handler+0xa0/0xe4 [ 5020.339221][T18985] el0t_64_sync+0x1a4/0x1a8 [ 5020.570909][T18989] netlink: 'syz.1.5307': attribute type 4 has an invalid length. [ 5020.607544][T18989] netlink: 'syz.1.5307': attribute type 4 has an invalid length. [ 5021.796584][T19007] netlink: 84 bytes leftover after parsing attributes in process `syz.1.5314'. [ 5022.047258][T19011] netlink: 27 bytes leftover after parsing attributes in process `syz.1.5316'. [ 5025.018572][T19032] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 5025.035949][ T8297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 5026.207463][T19057] sit1: entered promiscuous mode [ 5029.516416][T19080] FAULT_INJECTION: forcing a failure. [ 5029.516416][T19080] name failslab, interval 1, probability 0, space 0, times 0 [ 5029.516764][T19080] CPU: 1 UID: 0 PID: 19080 Comm: syz.1.5344 Tainted: G W syzkaller #0 PREEMPT [ 5029.516877][T19080] Tainted: [W]=WARN [ 5029.516910][T19080] Hardware name: linux,dummy-virt (DT) [ 5029.516947][T19080] Call trace: [ 5029.516979][T19080] show_stack+0x18/0x24 (C) [ 5029.517148][T19080] dump_stack_lvl+0x60/0x80 [ 5029.517249][T19080] dump_stack+0x18/0x24 [ 5029.517528][T19080] should_fail_ex+0x1e0/0x238 [ 5029.517685][T19080] should_failslab+0x54/0x80 [ 5029.517842][T19080] kmem_cache_alloc_lru_noprof+0x58/0x458 [ 5029.517951][T19080] sock_alloc_inode+0x24/0x94 [ 5029.518047][T19080] alloc_inode+0x28/0xdc [ 5029.518136][T19080] sock_alloc+0x20/0xa0 [ 5029.518248][T19080] __sock_create+0xa4/0x260 [ 5029.518353][T19080] __sys_socketpair+0x174/0x2c0 [ 5029.518450][T19080] __arm64_sys_socketpair+0x20/0x30 [ 5029.518520][T19080] invoke_syscall+0x54/0x10c [ 5029.518604][T19080] el0_svc_common.constprop.0+0x40/0xe0 [ 5029.518712][T19080] do_el0_svc+0x1c/0x34 [ 5029.518853][T19080] el0_svc+0x38/0x1fc [ 5029.518933][T19080] el0t_64_sync_handler+0xa0/0xe4 [ 5029.519020][T19080] el0t_64_sync+0x1a4/0x1a8 [ 5029.521667][T19080] socket: no more sockets [ 5029.572078][T19081] FAULT_INJECTION: forcing a failure. [ 5029.572078][T19081] name failslab, interval 1, probability 0, space 0, times 0 [ 5029.575916][T19081] CPU: 0 UID: 0 PID: 19081 Comm: syz.0.5345 Tainted: G W syzkaller #0 PREEMPT [ 5029.576064][T19081] Tainted: [W]=WARN [ 5029.576101][T19081] Hardware name: linux,dummy-virt (DT) [ 5029.576140][T19081] Call trace: [ 5029.576173][T19081] show_stack+0x18/0x24 (C) [ 5029.576283][T19081] dump_stack_lvl+0x60/0x80 [ 5029.576362][T19081] dump_stack+0x18/0x24 [ 5029.576463][T19081] should_fail_ex+0x1e0/0x238 [ 5029.576545][T19081] should_failslab+0x54/0x80 [ 5029.576636][T19081] kmem_cache_alloc_noprof+0x54/0x458 [ 5029.576719][T19081] __kernfs_new_node+0x70/0x254 [ 5029.576803][T19081] kernfs_new_node+0x88/0xa4 [ 5029.576881][T19081] __kernfs_create_file+0x30/0xfc [ 5029.576960][T19081] sysfs_add_file_mode_ns+0x74/0x130 [ 5029.577036][T19081] internal_create_group+0x2e0/0x440 [ 5029.577109][T19081] internal_create_groups+0x50/0xd8 [ 5029.577185][T19081] sysfs_create_groups+0x18/0x24 [ 5029.577262][T19081] device_add+0x4e8/0x800 [ 5029.577345][T19081] wakeup_source_device_create+0xcc/0x100 [ 5029.577418][T19081] wakeup_source_sysfs_add+0x18/0x40 [ 5029.577488][T19081] wakeup_source_register+0x88/0x170 [ 5029.577575][T19081] ep_create_wakeup_source+0xb8/0xe0 [ 5029.577652][T19081] do_epoll_ctl_file+0x790/0xb18 [ 5029.577725][T19081] do_epoll_ctl+0x8c/0x108 [ 5029.577796][T19081] __arm64_sys_epoll_ctl+0x68/0xa8 [ 5029.577869][T19081] invoke_syscall+0x54/0x10c [ 5029.577942][T19081] el0_svc_common.constprop.0+0x40/0xe0 [ 5029.578015][T19081] do_el0_svc+0x1c/0x34 [ 5029.578087][T19081] el0_svc+0x38/0x1fc [ 5029.578170][T19081] el0t_64_sync_handler+0xa0/0xe4 [ 5029.578247][T19081] el0t_64_sync+0x1a4/0x1a8 [ 5029.692241][T19083] FAULT_INJECTION: forcing a failure. [ 5029.692241][T19083] name failslab, interval 1, probability 0, space 0, times 0 [ 5029.692654][T19083] CPU: 1 UID: 0 PID: 19083 Comm: syz.1.5346 Tainted: G W syzkaller #0 PREEMPT [ 5029.692782][T19083] Tainted: [W]=WARN [ 5029.692819][T19083] Hardware name: linux,dummy-virt (DT) [ 5029.692862][T19083] Call trace: [ 5029.692896][T19083] show_stack+0x18/0x24 (C) [ 5029.693006][T19083] dump_stack_lvl+0x60/0x80 [ 5029.693136][T19083] dump_stack+0x18/0x24 [ 5029.693242][T19083] should_fail_ex+0x1e0/0x238 [ 5029.693328][T19083] should_failslab+0x54/0x80 [ 5029.693448][T19083] __kmalloc_noprof+0xac/0x520 [ 5029.693617][T19083] tomoyo_encode2+0x7c/0x13c [ 5029.693705][T19083] tomoyo_encode+0x28/0x40 [ 5029.693778][T19083] tomoyo_realpath_from_path+0x100/0x1d4 [ 5029.693873][T19083] tomoyo_path_number_perm+0xe0/0x21c [ 5029.693946][T19083] tomoyo_file_ioctl+0x1c/0x30 [ 5029.694041][T19083] security_file_ioctl+0x8c/0x19c [ 5029.694130][T19083] __arm64_sys_ioctl+0x44/0x100 [ 5029.694233][T19083] invoke_syscall+0x54/0x10c [ 5029.694318][T19083] el0_svc_common.constprop.0+0x40/0xe0 [ 5029.694499][T19083] do_el0_svc+0x1c/0x34 [ 5029.694615][T19083] el0_svc+0x38/0x1fc [ 5029.694738][T19083] el0t_64_sync_handler+0xa0/0xe4 [ 5029.694815][T19083] el0t_64_sync+0x1a4/0x1a8 [ 5029.695984][T19083] ERROR: Out of memory at tomoyo_realpath_from_path. [ 5030.057518][T19091] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5350'. [ 5032.804309][T19111] FAULT_INJECTION: forcing a failure. [ 5032.804309][T19111] name fail_futex, interval 1, probability 0, space 0, times 0 [ 5032.805174][T19111] CPU: 1 UID: 0 PID: 19111 Comm: syz.0.5359 Tainted: G W syzkaller #0 PREEMPT [ 5032.805298][T19111] Tainted: [W]=WARN [ 5032.805337][T19111] Hardware name: linux,dummy-virt (DT) [ 5032.805381][T19111] Call trace: [ 5032.805418][T19111] show_stack+0x18/0x24 (C) [ 5032.805526][T19111] dump_stack_lvl+0x60/0x80 [ 5032.805608][T19111] dump_stack+0x18/0x24 [ 5032.805683][T19111] should_fail_ex+0x1e0/0x238 [ 5032.805767][T19111] should_fail+0x14/0x40 [ 5032.805843][T19111] get_futex_key+0x4e0/0x620 [ 5032.805921][T19111] futex_wake+0x68/0x240 [ 5032.805998][T19111] do_futex+0x178/0x210 [ 5032.806084][T19111] mm_exit_exec_release+0xc0/0xd4 [ 5032.806160][T19111] do_exit+0x1a4/0x94c [ 5032.806241][T19111] do_group_exit+0x34/0x90 [ 5032.806325][T19111] get_signal+0x79c/0x860 [ 5032.806399][T19111] arch_do_signal_or_restart+0x98/0x3dc [ 5032.806473][T19111] exit_to_user_mode_loop+0x114/0x19c [ 5032.806548][T19111] el0_svc+0x1f0/0x1fc [ 5032.806634][T19111] el0t_64_sync_handler+0xa0/0xe4 [ 5032.806713][T19111] el0t_64_sync+0x1a4/0x1a8 [ 5033.098430][T19118] FAULT_INJECTION: forcing a failure. [ 5033.098430][T19118] name failslab, interval 1, probability 0, space 0, times 0 [ 5033.102107][T19118] CPU: 0 UID: 0 PID: 19118 Comm: syz.0.5362 Tainted: G W syzkaller #0 PREEMPT [ 5033.102258][T19118] Tainted: [W]=WARN [ 5033.102299][T19118] Hardware name: linux,dummy-virt (DT) [ 5033.102340][T19118] Call trace: [ 5033.102389][T19118] show_stack+0x18/0x24 (C) [ 5033.102501][T19118] dump_stack_lvl+0x60/0x80 [ 5033.102584][T19118] dump_stack+0x18/0x24 [ 5033.102662][T19118] should_fail_ex+0x1e0/0x238 [ 5033.102742][T19118] should_failslab+0x54/0x80 [ 5033.102816][T19118] __kmalloc_noprof+0xac/0x520 [ 5033.102889][T19118] tomoyo_realpath_from_path+0x44/0x1d4 [ 5033.102967][T19118] tomoyo_check_open_permission+0x128/0x190 [ 5033.103047][T19118] tomoyo_file_open+0x30/0x3c [ 5033.103120][T19118] security_file_open+0x74/0x148 [ 5033.103196][T19118] do_dentry_open+0xe0/0x4fc [ 5033.103270][T19118] vfs_open+0x2c/0xe8 [ 5033.103341][T19118] path_openat+0x5b4/0x960 [ 5033.103416][T19118] do_file_open+0xb0/0x168 [ 5033.103483][T19118] do_sys_openat2+0x84/0x104 [ 5033.103589][T19118] __arm64_sys_openat+0x64/0xc0 [ 5033.103672][T19118] invoke_syscall+0x54/0x10c [ 5033.103746][T19118] el0_svc_common.constprop.0+0x40/0xe0 [ 5033.103818][T19118] do_el0_svc+0x1c/0x34 [ 5033.103887][T19118] el0_svc+0x38/0x1fc [ 5033.103972][T19118] el0t_64_sync_handler+0xa0/0xe4 [ 5033.104062][T19118] el0t_64_sync+0x1a4/0x1a8 [ 5033.125887][T19118] ERROR: Out of memory at tomoyo_realpath_from_path. [ 5033.396272][T19127] Injecting memory failure for pfn 0x41f48 at process virtual address 0x20001000 [ 5033.442895][T19127] Memory failure: 0x41f48: unhandlable page. [ 5033.444123][T19127] Memory failure: 0x41f48: recovery action for reserved kernel page: Ignored [ 5033.577315][T19129] FAULT_INJECTION: forcing a failure. [ 5033.577315][T19129] name failslab, interval 1, probability 0, space 0, times 0 [ 5033.577658][T19129] CPU: 0 UID: 0 PID: 19129 Comm: syz.0.5367 Tainted: G W syzkaller #0 PREEMPT [ 5033.577768][T19129] Tainted: [W]=WARN [ 5033.577804][T19129] Hardware name: linux,dummy-virt (DT) [ 5033.577842][T19129] Call trace: [ 5033.577874][T19129] show_stack+0x18/0x24 (C) [ 5033.577973][T19129] dump_stack_lvl+0x60/0x80 [ 5033.578102][T19129] dump_stack+0x18/0x24 [ 5033.578198][T19129] should_fail_ex+0x1e0/0x238 [ 5033.578299][T19129] should_failslab+0x54/0x80 [ 5033.578377][T19129] __kmalloc_noprof+0xac/0x520 [ 5033.578480][T19129] tomoyo_realpath_from_path+0x44/0x1d4 [ 5033.578573][T19129] tomoyo_check_open_permission+0x128/0x190 [ 5033.578679][T19129] tomoyo_file_open+0x30/0x3c [ 5033.578763][T19129] security_file_open+0x74/0x148 [ 5033.578887][T19129] do_dentry_open+0xe0/0x4fc [ 5033.578974][T19129] vfs_open+0x2c/0xe8 [ 5033.579078][T19129] path_openat+0x5b4/0x960 [ 5033.579171][T19129] do_file_open+0xb0/0x168 [ 5033.579238][T19129] do_sys_openat2+0x84/0x104 [ 5033.579308][T19129] __arm64_sys_openat+0x64/0xc0 [ 5033.579382][T19129] invoke_syscall+0x54/0x10c [ 5033.579450][T19129] el0_svc_common.constprop.0+0x40/0xe0 [ 5033.579522][T19129] do_el0_svc+0x1c/0x34 [ 5033.579661][T19129] el0_svc+0x38/0x1fc [ 5033.579744][T19129] el0t_64_sync_handler+0xa0/0xe4 [ 5033.579819][T19129] el0t_64_sync+0x1a4/0x1a8 [ 5033.593690][T19129] ERROR: Out of memory at tomoyo_realpath_from_path. [ 5033.777193][T15660] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 5034.626464][T19151] tmpfs: Bad value for 'huge' [ 5034.642171][T19151] Injecting memory failure for pfn 0x9cd4d at process virtual address 0x20000000 [ 5034.649732][T19151] Memory failure: 0x9cd4d: Sending SIGBUS to syz.1.5378:19151 due to hardware memory corruption [ 5034.651396][T19151] Memory failure: 0x9cd4d: recovery action for dirty LRU page: Recovered [ 5034.653745][T19151] Injecting memory failure for pfn 0x41f48 at process virtual address 0x20001000 [ 5034.658780][T19151] Memory failure: 0x41f48: Sending SIGBUS to syz.1.5378:19151 due to hardware memory corruption [ 5034.660719][T19151] Memory failure: 0x41f48: recovery action for already poisoned page: Failed [ 5036.578036][T19172] FAULT_INJECTION: forcing a failure. [ 5036.578036][T19172] name failslab, interval 1, probability 0, space 0, times 0 [ 5036.578233][T19172] CPU: 0 UID: 0 PID: 19172 Comm: syz.0.5387 Tainted: G W syzkaller #0 PREEMPT [ 5036.578299][T19172] Tainted: [W]=WARN [ 5036.578318][T19172] Hardware name: linux,dummy-virt (DT) [ 5036.578341][T19172] Call trace: [ 5036.578358][T19172] show_stack+0x18/0x24 (C) [ 5036.578416][T19172] dump_stack_lvl+0x60/0x80 [ 5036.578457][T19172] dump_stack+0x18/0x24 [ 5036.578520][T19172] should_fail_ex+0x1e0/0x238 [ 5036.578592][T19172] should_failslab+0x54/0x80 [ 5036.578651][T19172] kmem_cache_alloc_noprof+0x54/0x458 [ 5036.578706][T19172] security_inode_alloc+0x30/0x1a0 [ 5036.578759][T19172] inode_init_always_gfp+0x174/0x254 [ 5036.578801][T19172] alloc_inode+0x40/0xdc [ 5036.578849][T19172] alloc_anon_inode+0x18/0xac [ 5036.578921][T19172] ioctx_alloc+0x1e4/0x6c0 [ 5036.578981][T19172] __arm64_sys_io_setup+0x5c/0x104 [ 5036.579023][T19172] invoke_syscall+0x54/0x10c [ 5036.579063][T19172] el0_svc_common.constprop.0+0x40/0xe0 [ 5036.579119][T19172] do_el0_svc+0x1c/0x34 [ 5036.579162][T19172] el0_svc+0x38/0x1fc [ 5036.579235][T19172] el0t_64_sync_handler+0xa0/0xe4 [ 5036.579300][T19172] el0t_64_sync+0x1a4/0x1a8 [ 5037.584341][T19186] netlink: 'syz.0.5393': attribute type 9 has an invalid length. [ 5037.584999][T19186] netlink: 'syz.0.5393': attribute type 7 has an invalid length. [ 5037.585126][T19186] netlink: 'syz.0.5393': attribute type 8 has an invalid length. [ 5037.945484][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 5039.279360][T19208] FAULT_INJECTION: forcing a failure. [ 5039.279360][T19208] name failslab, interval 1, probability 0, space 0, times 0 [ 5039.279760][T19208] CPU: 0 UID: 0 PID: 19208 Comm: syz.0.5402 Tainted: G W syzkaller #0 PREEMPT [ 5039.279878][T19208] Tainted: [W]=WARN [ 5039.279914][T19208] Hardware name: linux,dummy-virt (DT) [ 5039.279951][T19208] Call trace: [ 5039.279982][T19208] show_stack+0x18/0x24 (C) [ 5039.280109][T19208] dump_stack_lvl+0x60/0x80 [ 5039.280201][T19208] dump_stack+0x18/0x24 [ 5039.280326][T19208] should_fail_ex+0x1e0/0x238 [ 5039.280427][T19208] should_failslab+0x54/0x80 [ 5039.280543][T19208] kmem_cache_alloc_lru_noprof+0x58/0x458 [ 5039.280637][T19208] shmem_alloc_inode+0x20/0x34 [ 5039.280727][T19208] alloc_inode+0x28/0xdc [ 5039.280800][T19208] new_inode+0x14/0x88 [ 5039.280883][T19208] shmem_get_inode+0xb4/0x454 [ 5039.280988][T19208] __shmem_file_setup+0x178/0x1ac [ 5039.281068][T19208] shmem_zero_setup+0x38/0x80 [ 5039.281169][T19208] __mmap_region+0x9a4/0xacc [ 5039.281280][T19208] mmap_region+0x7c/0x16c [ 5039.281350][T19208] do_mmap+0x3d0/0x5a0 [ 5039.281432][T19208] vm_mmap_pgoff+0x120/0x198 [ 5039.281521][T19208] ksys_mmap_pgoff+0x50/0x1f8 [ 5039.281630][T19208] __arm64_sys_mmap+0x2c/0x40 [ 5039.281700][T19208] invoke_syscall+0x54/0x10c [ 5039.281796][T19208] el0_svc_common.constprop.0+0x40/0xe0 [ 5039.281884][T19208] do_el0_svc+0x1c/0x34 [ 5039.281984][T19208] el0_svc+0x38/0x1fc [ 5039.282105][T19208] el0t_64_sync_handler+0xa0/0xe4 [ 5039.282212][T19208] el0t_64_sync+0x1a4/0x1a8 [ 5040.905364][T19222] FAULT_INJECTION: forcing a failure. [ 5040.905364][T19222] name fail_futex, interval 1, probability 0, space 0, times 0 [ 5040.905788][T19222] CPU: 0 UID: 0 PID: 19222 Comm: syz.0.5408 Tainted: G W syzkaller #0 PREEMPT [ 5040.905908][T19222] Tainted: [W]=WARN [ 5040.905944][T19222] Hardware name: linux,dummy-virt (DT) [ 5040.905981][T19222] Call trace: [ 5040.906011][T19222] show_stack+0x18/0x24 (C) [ 5040.906122][T19222] dump_stack_lvl+0x60/0x80 [ 5040.906197][T19222] dump_stack+0x18/0x24 [ 5040.906271][T19222] should_fail_ex+0x1e0/0x238 [ 5040.906352][T19222] should_fail+0x14/0x40 [ 5040.906432][T19222] get_futex_key+0xdc/0x620 [ 5040.906512][T19222] futex_wake+0x68/0x240 [ 5040.906593][T19222] do_futex+0x178/0x210 [ 5040.906663][T19222] mm_exit_exec_release+0xc0/0xd4 [ 5040.906736][T19222] do_exit+0x1a4/0x94c [ 5040.906853][T19222] do_group_exit+0x34/0x90 [ 5040.906948][T19222] get_signal+0x79c/0x860 [ 5040.907054][T19222] arch_do_signal_or_restart+0xf4/0x3dc [ 5040.907142][T19222] exit_to_user_mode_loop+0x114/0x19c [ 5040.907243][T19222] el0_svc+0x1f0/0x1fc [ 5040.907326][T19222] el0t_64_sync_handler+0xa0/0xe4 [ 5040.907419][T19222] el0t_64_sync+0x1a4/0x1a8 [ 5041.249148][T19224] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5409'. [ 5041.265901][T19224] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5409'. [ 5042.773948][T19263] ipip0: entered promiscuous mode [ 5042.776283][T19263] ipip0: entered allmulticast mode [ 5043.017423][T19271] ip6gre2: entered allmulticast mode [ 5043.026693][T13681] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 5043.572386][T19284] FAULT_INJECTION: forcing a failure. [ 5043.572386][T19284] name failslab, interval 1, probability 0, space 0, times 0 [ 5043.574470][T19284] CPU: 1 UID: 0 PID: 19284 Comm: syz.0.5436 Tainted: G W syzkaller #0 PREEMPT [ 5043.574626][T19284] Tainted: [W]=WARN [ 5043.574707][T19284] Hardware name: linux,dummy-virt (DT) [ 5043.574752][T19284] Call trace: [ 5043.574786][T19284] show_stack+0x18/0x24 (C) [ 5043.574892][T19284] dump_stack_lvl+0x60/0x80 [ 5043.574967][T19284] dump_stack+0x18/0x24 [ 5043.575039][T19284] should_fail_ex+0x1e0/0x238 [ 5043.575115][T19284] should_failslab+0x54/0x80 [ 5043.575185][T19284] __kmalloc_cache_noprof+0x58/0x470 [ 5043.575263][T19284] device_add+0x450/0x800 [ 5043.575334][T19284] wakeup_source_device_create+0xcc/0x100 [ 5043.575405][T19284] wakeup_source_sysfs_add+0x18/0x40 [ 5043.575474][T19284] wakeup_source_register+0x88/0x170 [ 5043.575591][T19284] ep_create_wakeup_source+0xb8/0xe0 [ 5043.575669][T19284] do_epoll_ctl_file+0x790/0xb18 [ 5043.575739][T19284] do_epoll_ctl+0x8c/0x108 [ 5043.575806][T19284] __arm64_sys_epoll_ctl+0x68/0xa8 [ 5043.575875][T19284] invoke_syscall+0x54/0x10c [ 5043.575945][T19284] el0_svc_common.constprop.0+0x40/0xe0 [ 5043.576015][T19284] do_el0_svc+0x1c/0x34 [ 5043.576083][T19284] el0_svc+0x38/0x1fc [ 5043.576162][T19284] el0t_64_sync_handler+0xa0/0xe4 [ 5043.576236][T19284] el0t_64_sync+0x1a4/0x1a8 [ 5045.340974][T19320] netlink: 'syz.1.5453': attribute type 1 has an invalid length. [ 5045.491331][T19320] 8021q: adding VLAN 0 to HW filter on device bond1 [ 5045.506860][T19320] bond1: option tlb_dynamic_lb: unable to set because the bond device is up [ 5046.283785][T19345] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5464'. [ 5046.462469][T19349] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5466'. [ 5047.038354][T19361] FAULT_INJECTION: forcing a failure. [ 5047.038354][T19361] name failslab, interval 1, probability 0, space 0, times 0 [ 5047.038759][T19361] CPU: 0 UID: 0 PID: 19361 Comm: syz.1.5471 Tainted: G W syzkaller #0 PREEMPT [ 5047.038881][T19361] Tainted: [W]=WARN [ 5047.038918][T19361] Hardware name: linux,dummy-virt (DT) [ 5047.038960][T19361] Call trace: [ 5047.038993][T19361] show_stack+0x18/0x24 (C) [ 5047.039111][T19361] dump_stack_lvl+0x60/0x80 [ 5047.039188][T19361] dump_stack+0x18/0x24 [ 5047.039271][T19361] should_fail_ex+0x1e0/0x238 [ 5047.039366][T19361] should_failslab+0x54/0x80 [ 5047.039477][T19361] kmem_cache_alloc_lru_noprof+0x58/0x458 [ 5047.039591][T19361] sock_alloc_inode+0x24/0x94 [ 5047.039702][T19361] alloc_inode+0x28/0xdc [ 5047.039811][T19361] sock_alloc+0x20/0xa0 [ 5047.039883][T19361] __sock_create+0xa4/0x260 [ 5047.040058][T19361] __sys_socket+0xa0/0x140 [ 5047.040140][T19361] __arm64_sys_socket+0x1c/0x38 [ 5047.040230][T19361] invoke_syscall+0x54/0x10c [ 5047.040307][T19361] el0_svc_common.constprop.0+0x40/0xe0 [ 5047.040421][T19361] do_el0_svc+0x1c/0x34 [ 5047.040557][T19361] el0_svc+0x38/0x1fc [ 5047.040645][T19361] el0t_64_sync_handler+0xa0/0xe4 [ 5047.040722][T19361] el0t_64_sync+0x1a4/0x1a8 [ 5047.047685][T19361] socket: no more sockets [ 5047.075716][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 5047.236716][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 5051.009945][T19406] FAULT_INJECTION: forcing a failure. [ 5051.009945][T19406] name failslab, interval 1, probability 0, space 0, times 0 [ 5051.010313][T19406] CPU: 0 UID: 0 PID: 19406 Comm: syz.0.5492 Tainted: G W syzkaller #0 PREEMPT [ 5051.010420][T19406] Tainted: [W]=WARN [ 5051.010452][T19406] Hardware name: linux,dummy-virt (DT) [ 5051.010488][T19406] Call trace: [ 5051.010518][T19406] show_stack+0x18/0x24 (C) [ 5051.010667][T19406] dump_stack_lvl+0x60/0x80 [ 5051.010746][T19406] dump_stack+0x18/0x24 [ 5051.010810][T19406] should_fail_ex+0x1e0/0x238 [ 5051.010923][T19406] should_failslab+0x54/0x80 [ 5051.011016][T19406] __kmalloc_noprof+0xac/0x520 [ 5051.011155][T19406] lsm_blob_alloc+0x40/0x64 [ 5051.011222][T19406] security_sk_alloc+0x30/0x210 [ 5051.011294][T19406] sk_prot_alloc+0x7c/0x140 [ 5051.011489][T19406] sk_alloc+0x3c/0x288 [ 5051.011583][T19406] inet6_create+0xf4/0x520 [ 5051.011679][T19406] __sock_create+0x130/0x260 [ 5051.011741][T19406] __sys_socket+0xa0/0x140 [ 5051.011814][T19406] __arm64_sys_socket+0x1c/0x38 [ 5051.011879][T19406] invoke_syscall+0x54/0x10c [ 5051.011971][T19406] el0_svc_common.constprop.0+0x40/0xe0 [ 5051.012039][T19406] do_el0_svc+0x1c/0x34 [ 5051.012107][T19406] el0_svc+0x38/0x1fc [ 5051.012220][T19406] el0t_64_sync_handler+0xa0/0xe4 [ 5051.012290][T19406] el0t_64_sync+0x1a4/0x1a8 [ 5051.109054][T19408] ip_tables: iptables: counters copy to user failed while replacing table [ 5053.361695][T19417] FAULT_INJECTION: forcing a failure. [ 5053.361695][T19417] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 5053.362070][T19417] CPU: 0 UID: 0 PID: 19417 Comm: syz.0.5497 Tainted: G W syzkaller #0 PREEMPT [ 5053.362188][T19417] Tainted: [W]=WARN [ 5053.362219][T19417] Hardware name: linux,dummy-virt (DT) [ 5053.362256][T19417] Call trace: [ 5053.362316][T19417] show_stack+0x18/0x24 (C) [ 5053.362477][T19417] dump_stack_lvl+0x60/0x80 [ 5053.362607][T19417] dump_stack+0x18/0x24 [ 5053.362702][T19417] should_fail_ex+0x1e0/0x238 [ 5053.362778][T19417] should_fail+0x14/0x40 [ 5053.362843][T19417] should_fail_usercopy+0x1c/0x40 [ 5053.362932][T19417] _inline_copy_from_user+0x24/0xb0 [ 5053.363048][T19417] __arm64_sys_mq_notify+0x54/0xa8 [ 5053.363170][T19417] invoke_syscall+0x54/0x10c [ 5053.363259][T19417] el0_svc_common.constprop.0+0x40/0xe0 [ 5053.363329][T19417] do_el0_svc+0x1c/0x34 [ 5053.363392][T19417] el0_svc+0x38/0x1fc [ 5053.363469][T19417] el0t_64_sync_handler+0xa0/0xe4 [ 5053.363589][T19417] el0t_64_sync+0x1a4/0x1a8 [ 5054.599735][T19434] FAULT_INJECTION: forcing a failure. [ 5054.599735][T19434] name failslab, interval 1, probability 0, space 0, times 0 [ 5054.601875][T19434] CPU: 1 UID: 0 PID: 19434 Comm: syz.1.5504 Tainted: G W syzkaller #0 PREEMPT [ 5054.602019][T19434] Tainted: [W]=WARN [ 5054.602056][T19434] Hardware name: linux,dummy-virt (DT) [ 5054.602105][T19434] Call trace: [ 5054.602143][T19434] show_stack+0x18/0x24 (C) [ 5054.602247][T19434] dump_stack_lvl+0x60/0x80 [ 5054.602321][T19434] dump_stack+0x18/0x24 [ 5054.602390][T19434] should_fail_ex+0x1e0/0x238 [ 5054.602466][T19434] should_failslab+0x54/0x80 [ 5054.602540][T19434] __kmalloc_cache_noprof+0x58/0x470 [ 5054.602624][T19434] __arm64_sys_mount+0x88/0x204 [ 5054.602698][T19434] invoke_syscall+0x54/0x10c [ 5054.602762][T19434] el0_svc_common.constprop.0+0x40/0xe0 [ 5054.602828][T19434] do_el0_svc+0x1c/0x34 [ 5054.602889][T19434] el0_svc+0x38/0x1fc [ 5054.602963][T19434] el0t_64_sync_handler+0xa0/0xe4 [ 5054.603032][T19434] el0t_64_sync+0x1a4/0x1a8 [ 5055.385731][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 5056.177248][T19454] FAULT_INJECTION: forcing a failure. [ 5056.177248][T19454] name failslab, interval 1, probability 0, space 0, times 0 [ 5056.182451][T19454] CPU: 1 UID: 0 PID: 19454 Comm: syz.1.5513 Tainted: G W syzkaller #0 PREEMPT [ 5056.182620][T19454] Tainted: [W]=WARN [ 5056.182656][T19454] Hardware name: linux,dummy-virt (DT) [ 5056.182698][T19454] Call trace: [ 5056.182732][T19454] show_stack+0x18/0x24 (C) [ 5056.182843][T19454] dump_stack_lvl+0x60/0x80 [ 5056.182918][T19454] dump_stack+0x18/0x24 [ 5056.182988][T19454] should_fail_ex+0x1e0/0x238 [ 5056.183073][T19454] should_failslab+0x54/0x80 [ 5056.183148][T19454] __kmalloc_cache_noprof+0x58/0x470 [ 5056.183227][T19454] do_epoll_create+0x34/0x1cc [ 5056.183302][T19454] __arm64_sys_epoll_create1+0x14/0x24 [ 5056.183375][T19454] invoke_syscall+0x54/0x10c [ 5056.183453][T19454] el0_svc_common.constprop.0+0x40/0xe0 [ 5056.183524][T19454] do_el0_svc+0x1c/0x34 [ 5056.183624][T19454] el0_svc+0x38/0x1fc [ 5056.183705][T19454] el0t_64_sync_handler+0xa0/0xe4 [ 5056.183784][T19454] el0t_64_sync+0x1a4/0x1a8 [ 5056.512545][T19459] FAULT_INJECTION: forcing a failure. [ 5056.512545][T19459] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 5056.512951][T19459] CPU: 0 UID: 0 PID: 19459 Comm: syz.1.5515 Tainted: G W syzkaller #0 PREEMPT [ 5056.513079][T19459] Tainted: [W]=WARN [ 5056.513112][T19459] Hardware name: linux,dummy-virt (DT) [ 5056.513150][T19459] Call trace: [ 5056.513183][T19459] show_stack+0x18/0x24 (C) [ 5056.514072][T19459] dump_stack_lvl+0x60/0x80 [ 5056.514514][T19459] dump_stack+0x18/0x24 [ 5056.515213][T19459] should_fail_ex+0x1e0/0x238 [ 5056.517067][T19459] should_fail+0x14/0x40 [ 5056.517194][T19459] should_fail_usercopy+0x1c/0x40 [ 5056.517298][T19459] _inline_copy_from_user+0x24/0xb0 [ 5056.517389][T19459] __arm64_sys_mq_notify+0x54/0xa8 [ 5056.517472][T19459] invoke_syscall+0x54/0x10c [ 5056.517549][T19459] el0_svc_common.constprop.0+0x40/0xe0 [ 5056.517625][T19459] do_el0_svc+0x1c/0x34 [ 5056.517766][T19459] el0_svc+0x38/0x1fc [ 5056.517856][T19459] el0t_64_sync_handler+0xa0/0xe4 [ 5056.517934][T19459] el0t_64_sync+0x1a4/0x1a8 [ 5056.701219][T19463] FAULT_INJECTION: forcing a failure. [ 5056.701219][T19463] name failslab, interval 1, probability 0, space 0, times 0 [ 5056.703435][T19463] CPU: 1 UID: 0 PID: 19463 Comm: syz.1.5518 Tainted: G W syzkaller #0 PREEMPT [ 5056.703616][T19463] Tainted: [W]=WARN [ 5056.703654][T19463] Hardware name: linux,dummy-virt (DT) [ 5056.703693][T19463] Call trace: [ 5056.703723][T19463] show_stack+0x18/0x24 (C) [ 5056.703825][T19463] dump_stack_lvl+0x60/0x80 [ 5056.703893][T19463] dump_stack+0x18/0x24 [ 5056.703957][T19463] should_fail_ex+0x1e0/0x238 [ 5056.704078][T19463] should_failslab+0x54/0x80 [ 5056.704151][T19463] __kmalloc_cache_noprof+0x58/0x470 [ 5056.704225][T19463] do_epoll_create+0x34/0x1cc [ 5056.704294][T19463] __arm64_sys_epoll_create1+0x14/0x24 [ 5056.704360][T19463] invoke_syscall+0x54/0x10c [ 5056.704420][T19463] el0_svc_common.constprop.0+0x40/0xe0 [ 5056.704547][T19463] do_el0_svc+0x1c/0x34 [ 5056.704619][T19463] el0_svc+0x38/0x1fc [ 5056.704689][T19463] el0t_64_sync_handler+0xa0/0xe4 [ 5056.704759][T19463] el0t_64_sync+0x1a4/0x1a8 [ 5057.089854][T19472] FAULT_INJECTION: forcing a failure. [ 5057.089854][T19472] name failslab, interval 1, probability 0, space 0, times 0 [ 5057.090106][T19472] CPU: 0 UID: 0 PID: 19472 Comm: syz.1.5521 Tainted: G W syzkaller #0 PREEMPT [ 5057.090172][T19472] Tainted: [W]=WARN [ 5057.090191][T19472] Hardware name: linux,dummy-virt (DT) [ 5057.090213][T19472] Call trace: [ 5057.090230][T19472] show_stack+0x18/0x24 (C) [ 5057.090288][T19472] dump_stack_lvl+0x60/0x80 [ 5057.090367][T19472] dump_stack+0x18/0x24 [ 5057.090428][T19472] should_fail_ex+0x1e0/0x238 [ 5057.090503][T19472] should_failslab+0x54/0x80 [ 5057.090567][T19472] __kmalloc_noprof+0xac/0x520 [ 5057.090608][T19472] tomoyo_realpath_from_path+0x44/0x1d4 [ 5057.090654][T19472] tomoyo_check_open_permission+0x128/0x190 [ 5057.090731][T19472] tomoyo_file_open+0x30/0x3c [ 5057.090788][T19472] security_file_open+0x74/0x148 [ 5057.090830][T19472] do_dentry_open+0xe0/0x4fc [ 5057.090910][T19472] vfs_open+0x2c/0xe8 [ 5057.090985][T19472] path_openat+0x5b4/0x960 [ 5057.091071][T19472] do_file_open+0xb0/0x168 [ 5057.091141][T19472] do_sys_openat2+0x84/0x104 [ 5057.091191][T19472] __arm64_sys_openat+0x64/0xc0 [ 5057.091230][T19472] invoke_syscall+0x54/0x10c [ 5057.091279][T19472] el0_svc_common.constprop.0+0x40/0xe0 [ 5057.091354][T19472] do_el0_svc+0x1c/0x34 [ 5057.091423][T19472] el0_svc+0x38/0x1fc [ 5057.091473][T19472] el0t_64_sync_handler+0xa0/0xe4 [ 5057.091515][T19472] el0t_64_sync+0x1a4/0x1a8 [ 5057.109679][T19472] ERROR: Out of memory at tomoyo_realpath_from_path. [ 5057.261740][T19475] FAULT_INJECTION: forcing a failure. [ 5057.261740][T19475] name failslab, interval 1, probability 0, space 0, times 0 [ 5057.263679][T19475] CPU: 1 UID: 0 PID: 19475 Comm: syz.0.5523 Tainted: G W syzkaller #0 PREEMPT [ 5057.263820][T19475] Tainted: [W]=WARN [ 5057.263856][T19475] Hardware name: linux,dummy-virt (DT) [ 5057.263895][T19475] Call trace: [ 5057.263928][T19475] show_stack+0x18/0x24 (C) [ 5057.264029][T19475] dump_stack_lvl+0x60/0x80 [ 5057.264124][T19475] dump_stack+0x18/0x24 [ 5057.264194][T19475] should_fail_ex+0x1e0/0x238 [ 5057.264268][T19475] should_failslab+0x54/0x80 [ 5057.264336][T19475] __kmalloc_cache_noprof+0x58/0x470 [ 5057.264408][T19475] do_epoll_create+0x34/0x1cc [ 5057.264519][T19475] __arm64_sys_epoll_create1+0x14/0x24 [ 5057.264598][T19475] invoke_syscall+0x54/0x10c [ 5057.264662][T19475] el0_svc_common.constprop.0+0x40/0xe0 [ 5057.264729][T19475] do_el0_svc+0x1c/0x34 [ 5057.264820][T19475] el0_svc+0x38/0x1fc [ 5057.264901][T19475] el0t_64_sync_handler+0xa0/0xe4 [ 5057.264972][T19475] el0t_64_sync+0x1a4/0x1a8 [ 5057.766563][T19486] FAULT_INJECTION: forcing a failure. [ 5057.766563][T19486] name failslab, interval 1, probability 0, space 0, times 0 [ 5057.766912][T19486] CPU: 0 UID: 0 PID: 19486 Comm: syz.0.5529 Tainted: G W syzkaller #0 PREEMPT [ 5057.767029][T19486] Tainted: [W]=WARN [ 5057.767078][T19486] Hardware name: linux,dummy-virt (DT) [ 5057.767120][T19486] Call trace: [ 5057.767190][T19486] show_stack+0x18/0x24 (C) [ 5057.767360][T19486] dump_stack_lvl+0x60/0x80 [ 5057.767457][T19486] dump_stack+0x18/0x24 [ 5057.767534][T19486] should_fail_ex+0x1e0/0x238 [ 5057.767663][T19486] should_failslab+0x54/0x80 [ 5057.767748][T19486] __kmalloc_cache_noprof+0x58/0x470 [ 5057.767880][T19486] do_epoll_create+0x34/0x1cc [ 5057.768004][T19486] __arm64_sys_epoll_create1+0x14/0x24 [ 5057.768099][T19486] invoke_syscall+0x54/0x10c [ 5057.768235][T19486] el0_svc_common.constprop.0+0x40/0xe0 [ 5057.768358][T19486] do_el0_svc+0x1c/0x34 [ 5057.768447][T19486] el0_svc+0x38/0x1fc [ 5057.768555][T19486] el0t_64_sync_handler+0xa0/0xe4 [ 5057.768670][T19486] el0t_64_sync+0x1a4/0x1a8 [ 5058.004461][T19493] FAULT_INJECTION: forcing a failure. [ 5058.004461][T19493] name fail_futex, interval 1, probability 0, space 0, times 0 [ 5058.006380][T19493] CPU: 0 UID: 0 PID: 19493 Comm: syz.1.5531 Tainted: G W syzkaller #0 PREEMPT [ 5058.006512][T19493] Tainted: [W]=WARN [ 5058.006552][T19493] Hardware name: linux,dummy-virt (DT) [ 5058.006614][T19493] Call trace: [ 5058.006654][T19493] show_stack+0x18/0x24 (C) [ 5058.006756][T19493] dump_stack_lvl+0x60/0x80 [ 5058.006828][T19493] dump_stack+0x18/0x24 [ 5058.006896][T19493] should_fail_ex+0x1e0/0x238 [ 5058.006971][T19493] should_fail+0x14/0x40 [ 5058.007053][T19493] get_futex_key+0x164/0x620 [ 5058.007127][T19493] futex_wake+0x68/0x240 [ 5058.007199][T19493] do_futex+0x178/0x210 [ 5058.007267][T19493] mm_exit_exec_release+0xc0/0xd4 [ 5058.007337][T19493] do_exit+0x1a4/0x94c [ 5058.007408][T19493] do_group_exit+0x34/0x90 [ 5058.007482][T19493] get_signal+0x79c/0x860 [ 5058.007594][T19493] arch_do_signal_or_restart+0x98/0x3dc [ 5058.007704][T19493] exit_to_user_mode_loop+0x114/0x19c [ 5058.007788][T19493] el0_svc+0x1f0/0x1fc [ 5058.007872][T19493] el0t_64_sync_handler+0xa0/0xe4 [ 5058.007950][T19493] el0t_64_sync+0x1a4/0x1a8 [ 5059.734306][T19518] device-mapper: ioctl: Invalid ioctl structure: name t, dev f800 [ 5060.870358][T19543] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5554'. [ 5064.985185][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 5065.411272][T19567] FAULT_INJECTION: forcing a failure. [ 5065.411272][T19567] name failslab, interval 1, probability 0, space 0, times 0 [ 5065.411506][T19567] CPU: 0 UID: 0 PID: 19567 Comm: syz.1.5563 Tainted: G W syzkaller #0 PREEMPT [ 5065.411623][T19567] Tainted: [W]=WARN [ 5065.411653][T19567] Hardware name: linux,dummy-virt (DT) [ 5065.411674][T19567] Call trace: [ 5065.411691][T19567] show_stack+0x18/0x24 (C) [ 5065.411746][T19567] dump_stack_lvl+0x60/0x80 [ 5065.411846][T19567] dump_stack+0x18/0x24 [ 5065.412039][T19567] should_fail_ex+0x1e0/0x238 [ 5065.412151][T19567] should_failslab+0x54/0x80 [ 5065.412237][T19567] __kmalloc_cache_noprof+0x58/0x470 [ 5065.412332][T19567] do_epoll_create+0x34/0x1cc [ 5065.412428][T19567] __arm64_sys_epoll_create1+0x14/0x24 [ 5065.412529][T19567] invoke_syscall+0x54/0x10c [ 5065.412605][T19567] el0_svc_common.constprop.0+0x40/0xe0 [ 5065.412693][T19567] do_el0_svc+0x1c/0x34 [ 5065.412779][T19567] el0_svc+0x38/0x1fc [ 5065.412875][T19567] el0t_64_sync_handler+0xa0/0xe4 [ 5065.412960][T19567] el0t_64_sync+0x1a4/0x1a8 [ 5066.915509][T18090] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 5067.065606][T18090] usb 1-1: Using ep0 maxpacket: 32 [ 5067.070425][T18090] usb 1-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68 [ 5067.084081][T18090] usb 1-1: config 0 has an invalid interface number: 89 but max is 0 [ 5067.084383][T18090] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 5067.084874][T18090] usb 1-1: config 0 has no interface number 0 [ 5067.085046][T18090] usb 1-1: config 0 interface 89 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 5067.107505][T18090] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 5067.107767][T18090] usb 1-1: Product: syz [ 5067.107988][T18090] usb 1-1: Manufacturer: syz [ 5067.108024][T18090] usb 1-1: SerialNumber: syz [ 5067.114397][T18090] usb 1-1: config 0 descriptor?? [ 5067.121856][T18090] hub 1-1:0.89: bad descriptor, ignoring hub [ 5067.122349][T18090] hub 1-1:0.89: probe with driver hub failed with error -5 [ 5067.127326][T18090] option 1-1:0.89: GSM modem (1-port) converter detected [ 5067.439536][T18090] usb 1-1: USB disconnect, device number 8 [ 5067.443119][T18090] option 1-1:0.89: device disconnected [ 5072.675333][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 5082.135519][ T8297] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 5082.310784][ T8297] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 5082.565600][ T8297] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 5082.566003][ T8297] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 5082.566253][ T8297] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 5082.566436][ T8297] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 5082.589804][ T8297] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 5082.590159][ T8297] usb 1-1: Product: syz [ 5082.590364][ T8297] usb 1-1: Manufacturer: syz [ 5082.621604][ T8297] cdc_wdm 1-1:1.0: skipping garbage [ 5082.622096][ T8297] cdc_wdm 1-1:1.0: skipping garbage [ 5082.646416][ T8297] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 5082.827009][T12295] usb 1-1: USB disconnect, device number 9 [ 5083.285712][T18088] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 5083.449875][T18088] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 5083.458825][T18088] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 5083.459238][T18088] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 5083.459583][T18088] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 5083.459807][T18088] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 5083.476311][T18088] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 5083.476611][T18088] usb 1-1: Product: syz [ 5083.476810][T18088] usb 1-1: Manufacturer: syz [ 5083.513213][T18088] cdc_wdm 1-1:1.0: skipping garbage [ 5083.513513][T18088] cdc_wdm 1-1:1.0: skipping garbage [ 5083.522024][T18088] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 5090.465835][T19669] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5090.473408][T19669] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5096.889400][T18089] usb 1-1: USB disconnect, device number 10 [ 5097.285636][T19696] netlink: 'syz.0.5607': attribute type 1 has an invalid length. [ 5097.286286][T19696] netlink: 'syz.0.5607': attribute type 1 has an invalid length. [ 5097.825915][T18090] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 5097.991356][T18090] usb 1-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 5098.022755][T18090] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 5098.023546][T18090] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 5098.023716][T18090] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 5098.023819][T18090] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 5098.048607][T18090] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 5098.048879][T18090] usb 1-1: Product: syz [ 5098.049105][T18090] usb 1-1: Manufacturer: syz [ 5098.049206][T18090] usb 1-1: SerialNumber: syz [ 5098.292808][T18090] usb 1-1: Not enough endpoints found in device, aborting! [ 5098.495430][T18090] usb 1-1: USB disconnect, device number 11 [ 5098.906203][T18090] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 5099.055291][T18090] usb 1-1: Using ep0 maxpacket: 16 [ 5099.059596][T18090] usb 1-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 5099.067796][T18090] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 5099.068029][T18090] usb 1-1: config 0 has no interface number 0 [ 5099.083612][T18090] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 5099.083874][T18090] usb 1-1: Product: syz [ 5099.084158][T18090] usb 1-1: Manufacturer: syz [ 5099.084222][T18090] usb 1-1: SerialNumber: syz [ 5099.095633][T18090] usb 1-1: config 0 descriptor?? [ 5099.111270][T18090] hub 1-1:0.132: bad descriptor, ignoring hub [ 5099.111780][T18090] hub 1-1:0.132: probe with driver hub failed with error -5 [ 5099.121997][T18090] usbhid 1-1:0.132: couldn't find an input interrupt endpoint [ 5099.433579][T19715] binder: 19714:19715 tried to acquire reference to desc 0, got 1 instead [ 5099.438633][T18088] usb 1-1: USB disconnect, device number 12 [ 5099.454021][T18090] binder: undelivered TRANSACTION_COMPLETE [ 5099.663151][T19717] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5617'. [ 5099.724279][T19719] fuse: Bad value for 'fd' [ 5100.825350][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 5102.751199][T15654] syzkaller0: tun_net_xmit 76 [ 5102.766678][T15654] syzkaller0: tun_net_xmit 48 [ 5102.776765][ T8297] syzkaller0: tun_net_xmit 76 [ 5102.780772][T19729] syzkaller0: create flow: hash 201463182 index 0 [ 5102.995987][T19729] syzkaller0 (unregistered): delete flow: hash 201463182 index 0 [ 5103.046261][T19734] fuse: Bad value for 'fd' [ 5106.585438][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 5106.968635][T19761] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5106.972068][T19762] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5634'. [ 5106.972244][T19761] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5106.972476][T19762] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5634'. [ 5108.905766][T12295] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 5109.069767][T12295] usb 1-1: New USB device found, idVendor=9710, idProduct=7840, bcdDevice= 0.00 [ 5109.085936][T12295] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 5109.086210][T12295] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 5109.105744][T12295] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 5109.105954][T12295] usb 1-1: Product: syz [ 5109.107161][T12295] usb 1-1: Manufacturer: syz [ 5109.107248][T12295] usb 1-1: SerialNumber: syz [ 5109.148674][T12295] mos7840 1-1:1.0: Moschip 7840/7820 USB Serial Driver converter detected [ 5109.422570][T12295] mos7840 1-1:1.0: probe with driver mos7840 failed with error -71 [ 5109.518380][T12295] usb 1-1: USB disconnect, device number 13 [ 5110.713903][T19804] kernel profiling enabled (shift: 7) [ 5111.911705][T19811] xt_CT: You must specify a L4 protocol and not use inversions on it [ 5113.476545][ T28] audit: type=1326 audit(5113.280:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19818 comm="syz.0.5654" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff85f792a8 code=0x7ffc0000 [ 5113.480313][ T28] audit: type=1326 audit(5113.280:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19818 comm="syz.0.5654" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff85f792a8 code=0x7ffc0000 [ 5113.491342][ T28] audit: type=1326 audit(5113.290:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19818 comm="syz.0.5654" exe="/syz-executor" sig=0 arch=c00000b7 syscall=164 compat=0 ip=0xffff85f792a8 code=0x7ffc0000 [ 5113.496330][ T28] audit: type=1326 audit(5113.300:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19818 comm="syz.0.5654" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff85f792a8 code=0x7ffc0000 [ 5113.501721][ T28] audit: type=1326 audit(5113.300:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19818 comm="syz.0.5654" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff85f792a8 code=0x7ffc0000 [ 5114.183856][T19826] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5114.193243][T19826] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5116.186670][T19840] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 5116.283671][T19840] input: syz1 as /devices/virtual/input/input76 [ 5118.652440][T19857] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 5124.912888][T19914] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5124.917619][T19914] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5127.175608][ T8297] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 5127.355763][ T8297] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 5127.362219][ T8297] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 5127.362709][ T8297] usb 1-1: can't read configurations, error -71 [ 5128.005580][ T8297] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 5128.155779][ T8297] usb 1-1: Using ep0 maxpacket: 8 [ 5128.161943][ T8297] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 5128.175643][ T8297] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 5128.177149][ T8297] usb 1-1: config 0 has no interface number 0 [ 5128.178533][ T8297] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 5128.180190][ T8297] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 5128.181726][ T8297] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 82, changing to 10 [ 5128.183293][ T8297] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 34338, setting to 1024 [ 5128.186119][ T8297] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 5128.188415][ T8297] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 5128.201066][ T8297] usb 1-1: config 0 descriptor?? [ 5128.226994][T19978] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 5128.246104][ T8297] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 5128.836472][T18088] usb 1-1: USB disconnect, device number 15 [ 5128.876529][T18088] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 5135.120290][T20035] binder: 20034:20035 ioctl c0306201 0 returned -14 [ 5135.285963][T20037] FAULT_INJECTION: forcing a failure. [ 5135.285963][T20037] name failslab, interval 1, probability 0, space 0, times 0 [ 5135.288224][T20037] CPU: 1 UID: 0 PID: 20037 Comm: syz.1.5739 Tainted: G W L syzkaller #0 PREEMPT [ 5135.288372][T20037] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 5135.288408][T20037] Hardware name: linux,dummy-virt (DT) [ 5135.288445][T20037] Call trace: [ 5135.288484][T20037] show_stack+0x18/0x24 (C) [ 5135.288584][T20037] dump_stack_lvl+0x60/0x80 [ 5135.288652][T20037] dump_stack+0x18/0x24 [ 5135.288716][T20037] should_fail_ex+0x1e0/0x238 [ 5135.288786][T20037] should_failslab+0x54/0x80 [ 5135.288852][T20037] kmem_cache_alloc_noprof+0x54/0x458 [ 5135.288923][T20037] vm_area_alloc+0x24/0x70 [ 5135.288990][T20037] __mmap_region+0x418/0xacc [ 5135.289054][T20037] mmap_region+0x7c/0x16c [ 5135.289115][T20037] do_mmap+0x3d0/0x5a0 [ 5135.289177][T20037] vm_mmap_pgoff+0x120/0x198 [ 5135.289239][T20037] ksys_mmap_pgoff+0x50/0x1f8 [ 5135.289309][T20037] __arm64_sys_mmap+0x2c/0x40 [ 5135.289373][T20037] invoke_syscall+0x54/0x10c [ 5135.289438][T20037] el0_svc_common.constprop.0+0x40/0xe0 [ 5135.289512][T20037] do_el0_svc+0x1c/0x34 [ 5135.289575][T20037] el0_svc+0x38/0x1fc [ 5135.289648][T20037] el0t_64_sync_handler+0xa0/0xe4 [ 5135.289717][T20037] el0t_64_sync+0x1a4/0x1a8 [ 5138.739384][T20046] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5138.740884][T20046] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5138.989309][T20046] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5138.990621][T20046] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5142.420675][T20059] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5142.423435][T20059] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5143.382194][T20068] random: crng reseeded on system resumption [ 5143.885231][T20080] netlink: 'syz.0.5756': attribute type 4 has an invalid length. [ 5143.927231][T20080] netlink: 'syz.0.5756': attribute type 4 has an invalid length. [ 5144.253842][T20092] batadv_slave_1: entered promiscuous mode [ 5144.261811][T20091] batadv_slave_1: left promiscuous mode [ 5150.375971][T18089] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 5150.528947][T18089] usb 1-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 5150.533629][T18089] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 5150.534070][T18089] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 5150.534218][T18089] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 5150.534290][T18089] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 5150.534362][T18089] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 5150.534450][T18089] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 64 [ 5150.535124][T18089] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 64 [ 5150.535208][T18089] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 64 [ 5150.535279][T18089] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 5150.535350][T18089] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 5150.535421][T18089] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 5150.535489][T18089] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 64 [ 5150.535590][T18089] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 5150.535657][T18089] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 5150.535727][T18089] usb 1-1: config 1 interface 0 altsetting 0 has 12 endpoint descriptors, different from the interface descriptor's value: 14 [ 5150.578583][T18089] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 5150.579741][T18089] usb 1-1: Product: syz [ 5150.579926][T18089] usb 1-1: Manufacturer: syz [ 5150.580049][T18089] usb 1-1: SerialNumber: syz [ 5150.593069][T20167] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 5150.600858][T20167] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 5150.610431][T20167] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 5150.615402][T20167] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 5150.619465][T20167] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 5150.624389][T20167] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 5150.630160][T20167] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 5150.636809][T20167] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 5150.641716][T20167] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 5150.648827][T20167] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 5150.656234][T20167] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 5150.665880][T18089] keyspan 1-1:1.0: Keyspan 2 port adapter converter detected [ 5150.669746][T18089] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 7 [ 5150.689854][T18089] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 5150.705464][T18089] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 6 [ 5150.712556][T18089] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 5151.057839][T18089] usb 1-1: USB disconnect, device number 16 [ 5151.199193][T18089] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 5151.307335][T18089] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 5151.311918][T18089] keyspan 1-1:1.0: device disconnected [ 5151.853199][T20180] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5151.871132][T20180] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5155.297433][T20239] netlink: 72 bytes leftover after parsing attributes in process `syz.1.5814'. [ 5157.232116][T20273] ubi0: attaching mtd0 [ 5157.266859][T20273] ubi0: scanning is finished [ 5157.267769][T20273] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 5157.295903][T20273] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 5157.691190][T20283] ubi0: attaching mtd1 [ 5157.701212][T20283] ubi0: scanning is finished [ 5157.701553][T20283] ubi0: empty MTD device detected [ 5157.758764][T20283] ubi0: attached mtd1 (name "mtdram test device", size 0 MiB) [ 5157.759156][T20283] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 5157.759476][T20283] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 5157.759674][T20283] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 5157.759751][T20283] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 5157.759820][T20283] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 5157.759887][T20283] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1102863815 [ 5157.759972][T20283] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 5157.763483][T20284] ubi0: background thread "ubi_bgt0d" started, PID 20284 [ 5158.308753][T20285] ubi0 error: ubi_create_volume: not enough PEBs, only 28 available [ 5158.310697][T20285] ubi0 error: ubi_create_volume: cannot create volume 0, error -28 [ 5159.228456][T20299] misc userio: The device must be registered before sending interrupts [ 5159.889939][T20313] tmpfs: Unknown parameter 'dont_measure' [ 5174.427419][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 5174.428333][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 5175.308876][ T28] audit: type=1326 audit(5175.110:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20437 comm="syz.0.5893" exe="/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffff85f792a8 code=0x0 [ 5185.679208][ T28] audit: type=1326 audit(5185.480:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20501 comm="syz.0.5918" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff85f792a8 code=0x7ffc0000 [ 5185.684004][ T28] audit: type=1326 audit(5185.480:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20501 comm="syz.0.5918" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff85f792a8 code=0x7ffc0000 [ 5185.712399][ T28] audit: type=1326 audit(5185.480:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20501 comm="syz.0.5918" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff85f792a8 code=0x7ffc0000 [ 5185.718951][ T28] audit: type=1326 audit(5185.480:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20501 comm="syz.0.5918" exe="/syz-executor" sig=0 arch=c00000b7 syscall=131 compat=0 ip=0xffff85f792a8 code=0x7ffc0000 [ 5185.724181][ T28] audit: type=1326 audit(5185.480:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20501 comm="syz.0.5918" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff85f792a8 code=0x7ffc0000 [ 5185.732114][ T28] audit: type=1326 audit(5185.480:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20501 comm="syz.0.5918" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff85f792a8 code=0x7ffc0000 [ 5185.735178][ T28] audit: type=1326 audit(5185.480:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20501 comm="syz.0.5918" exe="/syz-executor" sig=0 arch=c00000b7 syscall=436 compat=0 ip=0xffff85f792a8 code=0x7ffc0000 [ 5185.741108][ T28] audit: type=1326 audit(5185.480:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20501 comm="syz.0.5918" exe="/syz-executor" sig=0 arch=c00000b7 syscall=94 compat=0 ip=0xffff85f792a8 code=0x7ffc0000 [ 5188.805143][T20530] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 5188.805143][T20530] The task syz.0.5929 (20530) triggered the difference, watch for misbehavior. [ 5196.734004][T20562] fuse: Bad value for 'group_id' [ 5196.736378][T20562] fuse: Bad value for 'group_id' [ 5211.441892][T20695] fuse: Unknown parameter 'group_i00000000000000000000' [ 5212.120377][T20705] fuse: Unknown parameter 'group_id00000000000000000000' [ 5212.405359][ T28] audit: type=1326 audit(5212.200:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20710 comm="syz.0.6005" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff85f792a8 code=0x7ffc0000 [ 5212.406038][ T28] audit: type=1326 audit(5212.200:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20710 comm="syz.0.6005" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff85f792a8 code=0x7ffc0000 [ 5212.406237][ T28] audit: type=1326 audit(5212.200:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20710 comm="syz.0.6005" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff85f792a8 code=0x7ffc0000 [ 5212.415050][ T28] audit: type=1326 audit(5212.210:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20710 comm="syz.0.6005" exe="/syz-executor" sig=0 arch=c00000b7 syscall=110 compat=0 ip=0xffff85f792a8 code=0x7ffc0000 [ 5212.426992][ T28] audit: type=1326 audit(5212.230:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20710 comm="syz.0.6005" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff85f792a8 code=0x7ffc0000 [ 5212.431228][ T28] audit: type=1326 audit(5212.230:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20710 comm="syz.0.6005" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff85f792a8 code=0x7ffc0000 [ 5212.431779][ T28] audit: type=1326 audit(5212.230:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20710 comm="syz.0.6005" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff85f792a8 code=0x7ffc0000 [ 5212.432015][ T28] audit: type=1326 audit(5212.230:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20710 comm="syz.0.6005" exe="/syz-executor" sig=0 arch=c00000b7 syscall=47 compat=0 ip=0xffff85f792a8 code=0x7ffc0000 [ 5212.440603][ T28] audit: type=1326 audit(5212.230:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20710 comm="syz.0.6005" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff85f792a8 code=0x7ffc0000 [ 5212.450407][ T28] audit: type=1326 audit(5212.250:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20710 comm="syz.0.6005" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff85f792a8 code=0x7ffc0000 [ 5213.080994][T20717] fuse: Unknown parameter 'group_id00000000000000000000' [ 5215.805550][T20734] fuse: Unknown parameter 'group_id00000000000000000000' [ 5217.128272][T20746] fuse: Bad value for 'user_id' [ 5217.130174][T20746] fuse: Bad value for 'user_id' [ 5223.163828][T20766] fuse: Bad value for 'user_id' [ 5223.164211][T20766] fuse: Bad value for 'user_id' [ 5223.914291][T20776] fuse: Bad value for 'fd' [ 5225.080279][T20788] fuse: Bad value for 'fd' [ 5227.659166][T20799] fuse: Bad value for 'fd' [ 5231.311354][T20827] fuse: Invalid rootmode [ 5248.641113][T20862] fuse: Unknown parameter 'user_i00000000000000000000' [ 5251.253294][T15660] pimreg: left allmulticast mode [ 5251.757843][T15660] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 5251.836745][T15660] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 5251.893300][T15660] bond0 (unregistering): Released all slaves [ 5252.157204][T20899] syzkaller0: entered promiscuous mode [ 5252.157646][T20899] syzkaller0: entered allmulticast mode [ 5252.321394][T15660] hsr_slave_0: left promiscuous mode [ 5252.336097][T15660] hsr_slave_1: left promiscuous mode [ 5252.356476][T15660] veth1_macvtap: left promiscuous mode [ 5252.356841][T15660] veth0_macvtap: left promiscuous mode [ 5252.357399][T15660] veth1_vlan: left promiscuous mode [ 5252.357585][T15660] veth0_vlan: left promiscuous mode [ 5252.572425][T20902] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5252.573814][T20902] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5253.376182][T20908] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5253.386566][T20908] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5253.488376][T20908] binder: 20907:20908 tried to acquire reference to desc 0, got 1 instead [ 5253.524047][T18090] binder: release 20907:20908 transaction 13 out, still active [ 5253.524491][T18090] binder: undelivered TRANSACTION_COMPLETE [ 5253.545786][T18090] binder: send failed reply for transaction 13, target dead [ 5262.431029][T20974] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6115'. [ 5262.452285][T20974] gretap0: entered promiscuous mode [ 5262.453164][T20974] macvlan2: entered allmulticast mode [ 5262.453290][T20974] gretap0: entered allmulticast mode [ 5265.688468][T21000] fuse: Unknown parameter '0x0000000000000003' [ 5266.171309][T21011] fuse: Unknown parameter '0x0000000000000003' [ 5266.249237][T21014] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 5266.257899][T21014] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 5266.805534][T21024] fuse: Unknown parameter '0x0000000000000003' [ 5267.436359][T14871] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 5267.595116][T14871] usb 1-1: Using ep0 maxpacket: 32 [ 5267.609083][T14871] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 5267.630423][T14871] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 5267.632712][T14871] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 5267.635909][T14871] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 5267.637656][T14871] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 5267.641997][T14871] usb 1-1: config 0 interface 0 has no altsetting 0 [ 5267.667656][T14871] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 5267.669393][T14871] usb 1-1: Product: syz [ 5267.670452][T14871] usb 1-1: Manufacturer: syz [ 5267.671285][T14871] usb 1-1: SerialNumber: syz [ 5267.696645][T14871] usb 1-1: config 0 descriptor?? [ 5267.714401][T14871] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 5267.726341][T14871] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 5269.430531][T21040] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5269.432221][T21040] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5269.770790][T21040] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6140'. [ 5271.666302][T18051] usb 1-1: USB disconnect, device number 17 [ 5271.686320][T18051] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 5272.679253][T21058] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.6146'. [ 5273.677344][T21067] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6150'. [ 5276.785113][T21100] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6156'. [ 5277.167544][T21106] ------------[ cut here ]------------ [ 5277.167833][T21106] WARNING: ./include/linux/skbuff.h:3243 at tcf_skbmod_act+0x4b0/0x4e0, CPU#1: syz.0.6157/21106 [ 5277.173278][T21106] Modules linked in: [ 5277.176067][T21106] CPU: 1 UID: 0 PID: 21106 Comm: syz.0.6157 Tainted: G W L syzkaller #0 PREEMPT [ 5277.177076][T21106] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 5277.177425][T21106] Hardware name: linux,dummy-virt (DT) [ 5277.178082][T21106] pstate: 61402009 (nZCv daif +PAN -UAO -TCO +DIT -SSBS BTYPE=--) [ 5277.178555][T21106] pc : tcf_skbmod_act+0x4b0/0x4e0 [ 5277.178910][T21106] lr : tcf_action_exec+0xb0/0x1d4 [ 5277.179290][T21106] sp : ffff80008748b850 [ 5277.179708][T21106] x29: ffff80008748b850 x28: fcf000000b85eb08 x27: fcf000000b85eb00 [ 5277.180592][T21106] x26: 0000000000000001 x25: 0000000020000000 x24: 0000000010000000 [ 5277.181110][T21106] x23: 0000000000000000 x22: 0000000000000010 x21: f3f0000008b61340 [ 5277.181542][T21106] x20: f3f0000009c46000 x19: f3f00000067d3900 x18: 0000000000000000 [ 5277.181962][T21106] x17: 0000000000000000 x16: 0000000000000000 x15: 0000000020000304 [ 5277.182390][T21106] x14: 0000000000000000 x13: 0000000000000000 x12: 0000000000000000 [ 5277.182851][T21106] x11: 0000000000000000 x10: 0000000000000000 x9 : 0000000000000000 [ 5277.183327][T21106] x8 : ffff80008748bac8 x7 : 0000000000000000 x6 : fff07ffffcd20000 [ 5277.183750][T21106] x5 : 0000000000000000 x4 : 0000000000000001 x3 : faf00000075312c0 [ 5277.184203][T21106] x2 : ffffc1ffbf7af710 x1 : 000000000000ffff x0 : 000000000000ffff [ 5277.185138][T21106] Call trace: [ 5277.185722][T21106] tcf_skbmod_act+0x4b0/0x4e0 (P) [ 5277.186305][T21106] tcf_action_exec+0xb0/0x1d4 [ 5277.186648][T21106] basic_classify+0x80/0xc4 [ 5277.186935][T21106] tcf_classify+0x1dc/0x410 [ 5277.187179][T21106] tc_run+0x108/0x1e0 [ 5277.187437][T21106] __netif_receive_skb_core.constprop.0+0x4d8/0xc40 [ 5277.187917][T21106] __netif_receive_skb_one_core+0x40/0x8c [ 5277.188272][T21106] __netif_receive_skb+0x18/0x60 [ 5277.188612][T21106] netif_receive_skb+0x3c/0xd8 [ 5277.188959][T21106] tun_get_user+0xbbc/0xf70 [ 5277.189280][T21106] tun_chr_write_iter+0x5c/0xf0 [ 5277.189630][T21106] vfs_write+0x244/0x36c [ 5277.190114][T21106] ksys_write+0x70/0x108 [ 5277.190440][T21106] __arm64_sys_write+0x18/0x24 [ 5277.190825][T21106] invoke_syscall+0x54/0x10c [ 5277.191247][T21106] el0_svc_common.constprop.0+0x40/0xe0 [ 5277.191727][T21106] do_el0_svc+0x1c/0x34 [ 5277.192216][T21106] el0_svc+0x38/0x1fc [ 5277.192702][T21106] el0t_64_sync_handler+0xa0/0xe4 [ 5277.193091][T21106] el0t_64_sync+0x1a4/0x1a8 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 5277.193882][T21106] ---[ end trace 0000000000000000 ]--- [ 5277.717422][T13681] bond0 (unregistering): Released all slaves